General

  • Target

    a1d57a6c97176f7926f70c385c25b573

  • Size

    33KB

  • MD5

    a1d57a6c97176f7926f70c385c25b573

  • SHA1

    6061ed82429d003fb0068ffc4ace8c069db1a06e

  • SHA256

    28fc652cb2fb79b934fa18c0e71e69f61e159a1dc7beeb81c5d5ee56b08fafcf

  • SHA512

    15293c8c6896d098a434d88ceff9259e0e6c9f456af09916c4339e17c2443661ba8b4dcf2f1175e0c7bea5f7be9d46c8bcdf316a3d9d31b4e397351c542a31ea

  • SSDEEP

    768:2MuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgkDsEDr:jNW71rcYDAWeoDrsdD

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a1d57a6c97176f7926f70c385c25b573
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections