Overview

overview

10

Static

static

10

1596461c2b...31.exe

windows7-x64

10

1596461c2b...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731.exe

  • Size

    87KB

  • Sample

    240411-s5b2gaee97

  • MD5

    a579638803127888421deeba6042cc4f

  • SHA1

    6142f6795670800c76eebc838345c87bcff1049f

  • SHA256

    1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731

  • SHA512

    3fc1dddc9599a9fee44af70c00345189b04b9c50f6b2faf09acc55c7532f2037de4ba9bd87719b7659b1ee44161762318555e03fc1d112f6282b86dd2496523c

  • SSDEEP

    768:09m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJC+S3MgyRARlJ+gc:Vsq+Q1aZQuIyJp0mgA+FJoEAbL

Score
10/10
xtremeratpersistenceratspywareupx

Malware Config

Extracted

Family

xtremerat

C2

hackercool.zapto.org

Targets

    • Target

      1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731.exe

    • Size

      87KB

    • MD5

      a579638803127888421deeba6042cc4f

    • SHA1

      6142f6795670800c76eebc838345c87bcff1049f

    • SHA256

      1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731

    • SHA512

      3fc1dddc9599a9fee44af70c00345189b04b9c50f6b2faf09acc55c7532f2037de4ba9bd87719b7659b1ee44161762318555e03fc1d112f6282b86dd2496523c

    • SSDEEP

      768:09m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJC+S3MgyRARlJ+gc:Vsq+Q1aZQuIyJp0mgA+FJoEAbL

    Score
    10/10
    xtremeratpersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks