xtremerat | 1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731[.]exe

General

Target

1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731.exe
Size

87KB
MD5

a579638803127888421deeba6042cc4f
SHA1

6142f6795670800c76eebc838345c87bcff1049f
SHA256

1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731
SHA512

3fc1dddc9599a9fee44af70c00345189b04b9c50f6b2faf09acc55c7532f2037de4ba9bd87719b7659b1ee44161762318555e03fc1d112f6282b86dd2496523c
SSDEEP

768:09m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJC+S3MgyRARlJ+gc:Vsq+Q1aZQuIyJp0mgA+FJoEAbL

Score

10^/10

upx xtremerat

Detect XtremeRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_xtremerat
Xtremerat family
xtremerat
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_xtremerat

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731.exe