General

  • Target

    1dcd0cf613d20d6d79427a63350ca004

  • Size

    191KB

  • MD5

    1dcd0cf613d20d6d79427a63350ca004

  • SHA1

    66a6617b0b0ddb336fe9693e8963a001aeeab840

  • SHA256

    36b27a3ee5e6c97cabe4b1f226b9745b9c61daa6c6ed7b66505d421dbe2c7122

  • SHA512

    4faf0a7ec2c8b8f073f9de914d2026db09e6ac6ddf973e0979d3f2ab81394569d8ee20d7c398521607aebc069e6b18382bc2a3e9c7e59b6a5e497a7bdf23b287

  • SSDEEP

    3072:o1Cn0MV+YBmY2gPn9T1xrt7GEd+jzbXDvS58scJFxv5AkRQlvABKU:ocnNGY2Ax7GhjzbzvpscJFN1RQ5U

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1dcd0cf613d20d6d79427a63350ca004
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections