General

  • Target

    cd600323ec9e7073c1df0f9754a0192a

  • Size

    27KB

  • MD5

    cd600323ec9e7073c1df0f9754a0192a

  • SHA1

    afbae76ab77650351a8bcaa7e2b43a758c606301

  • SHA256

    376aaea5aa685fef6de757b6f087d3f92b5d01a96e8546f870790d3daaa6ea1a

  • SHA512

    452b3b8977917139589d3a791d6b3baa92a5affda9e28cba8f82d7c3a9f6abd88354942bcabda7b87fef80d8137e9faf3a3c288ab181581f206e814b270ea7fc

  • SSDEEP

    768:oDvUGW+cwg39Sa4ee3nsCmOesTEbcyDCi:PGBcDB4z3VnesL2Ci

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cd600323ec9e7073c1df0f9754a0192a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections