Extracted

• • Target

    cc0b05d4a502163309f252dcd5458bfd3c69550665334c9fb539c018bdd8238f

  • Size

    65KB

  • MD5

    c405b40eef9d2031355ac78f3bea1be6

  • SHA1

    0885a5489c9945f4dd86ae9ddce0df71e9c12a6b

  • SHA256

    cc0b05d4a502163309f252dcd5458bfd3c69550665334c9fb539c018bdd8238f

  • SHA512

    b9f7cbd5ff8abe2fdbec8a4976b98c690bcd062817a3a3ce93d01ba94a3e7c36351bc37f889c8da23a18f4529447976fc2bb5f555988dc2a6e5a0b0471caf724

  • SSDEEP

    768:iMm1Sq4NQErBsH1tzoisBKQI6dObAG/dqMuW29Ifnca/yyR+P2ujf2iZK/A+7Xo6:Asq+QV4rObAdnWpf/yu7YzNwieoo

  Score

  10^/10

  xtremeratpersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Modifies Installed Components in the registry

    persistence

  • Adds Run key to start application

    persistence
  behavioral1behavioral2