General
- Target a783fe9088399545865c934634765ec8
- Size 65KB
- Sample240226-2et9ssaa28
- SHA256 9345b6c2d11f1680a1d1c0abaeff488befa1fb12e4fc70f10aa3adc6168e24d9
- MD5 a783fe9088399545865c934634765ec8
- SHA1 42dee18d344e697bfbef333d77a3bc1d1366c0c2
- SHA512 5f65fd87a16c51dfc3778a634d50b8f39650105ed3342f7d122d69bd4684cde5a216b7a6a21ffdc9dfbc44fa546e1bf8b52be41d49186a3b0b94b5a652c49e71
- SSDEEP 768:i8m1Sq4NQErBsH19zoisBKQI6dObAG/dq8uW29Ifnce/yyR+P2ujfgiZKPA+7XoV:Qsq+QVMrObAdXWpf7y47ozNwiUoh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
a783fe9088399545865c934634765ec8.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a783fe9088399545865c934634765ec8.exe
Resource
win10v2004-20240226-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
xtremerat
C2
-
zak53.no-ip.org
Targets
-
- Target a783fe9088399545865c934634765ec8
- Size 65KB
- SHA256 9345b6c2d11f1680a1d1c0abaeff488befa1fb12e4fc70f10aa3adc6168e24d9
- MD5 a783fe9088399545865c934634765ec8
- SHA1 42dee18d344e697bfbef333d77a3bc1d1366c0c2
- SHA512 5f65fd87a16c51dfc3778a634d50b8f39650105ed3342f7d122d69bd4684cde5a216b7a6a21ffdc9dfbc44fa546e1bf8b52be41d49186a3b0b94b5a652c49e71
- SSDEEP 768:i8m1Sq4NQErBsH19zoisBKQI6dObAG/dq8uW29Ifnce/yyR+P2ujfgiZKPA+7XoV:Qsq+QVMrObAdXWpf7y47ozNwiUoh
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detect XtremeRAT payload
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.