xtremerat | dc13a17824ba50aa5457b92e26192468788ff576ac819183d7b5e3ec1000b668 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc13a17824ba50aa5457b92e26192468788ff576ac819183d7b5e3ec1000b668
Size

44KB
MD5

01da5ab769320b5f6b7e6d9c6a16d7e0
SHA1

5786c5e7a86d3b5bda09c414c35f745a1981e252
SHA256

dc13a17824ba50aa5457b92e26192468788ff576ac819183d7b5e3ec1000b668
SHA512

49a62f3e34eb27442219c48d4d1b41293c0cb7176a1db5f202c0a3649bf71a0068908340707f07a26db94f546db05c9174dac4a03ee5d1a201386ddd3f2a8a34
SSDEEP

768:4Br+tjFqTPkAl2ztB1lr6an3sGzA8uvm2DfnOTQ4PIvzoEx:4yRUHlsL1lr6anXzLuvm2buQLoEx

Score

10^/10

xtremerat

Malware Config

Signatures

Detect XtremeRAT payload 1 IoCs

resource	yara_rule
sample	family_xtremerat

Xtremerat family
xtremerat

Files

dc13a17824ba50aa5457b92e26192468788ff576ac819183d7b5e3ec1000b668
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ