xtremerat | da23d1b2f06e219f028548cc2823aa4c2b251f5513f8502d82337c3acfcd5c82[.]exe

General

Target

da23d1b2f06e219f028548cc2823aa4c2b251f5513f8502d82337c3acfcd5c82.exe
Size

304KB
MD5

1192821d7e46a8b4ca5a3be98f93c809
SHA1

bfdc242a6ae77af10bb2b3e30d49269767a1a196
SHA256

da23d1b2f06e219f028548cc2823aa4c2b251f5513f8502d82337c3acfcd5c82
SHA512

56878ace9b58f9578f1f875ab935959771213ea1fbfc5a3d5be0f653492c4e05bc41e45e8229d8d96b1e5653b50e7a5831d8e16e6df1df81ad7f72ee4d6a4d5b
SSDEEP

768:K9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJ+BJzv+S3MgyRAR0:nsq+Q1aZQuIyJp0mgA+FJ4LEAbL

Score

10^/10

upx xtremerat

Family

xtremerat

C2

hackercool.zapto.org

Detect XtremeRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_xtremerat
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
Xtremerat family
xtremerat
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_xtremerat

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
da23d1b2f06e219f028548cc2823aa4c2b251f5513f8502d82337c3acfcd5c82.exe