General

  • Target

    NEAS.49812cd34a0581cf248df79b9d478860.exe

  • Size

    33KB

  • MD5

    49812cd34a0581cf248df79b9d478860

  • SHA1

    1faf2801fa13bebf8c2857be7f20e7baa6e57852

  • SHA256

    fa188bc7ac56575b40a5cb18a2b441ed8f6c2afc61754caa643153cfc82b78a3

  • SHA512

    8f3df644c6e3a4e1ceed2e19e81bea219bc4ce9e522f1a309adc74d80bf297b620c575c950f3136a84dfc1048cd99e987fa5a132a05ba20e1ff65285627890e0

  • SSDEEP

    768:gMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lMtzdcM1fYgsK:pNW71rcYDAWeotvXl6PQ

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.49812cd34a0581cf248df79b9d478860.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections