General
-
Target
6d0b197c5b4db07c0a1e434c99144ba9.bin
-
Size
40KB
-
Sample
240413-bqq4eace5t
-
MD5
beb9c191b1e7025a22fe757d34f14c67
-
SHA1
b9f92c5a5e9540ea2bd0ccc24edf1d9d10997043
-
SHA256
183fb0c54505c97b59883b71ed75db2aa11429fac6e0c83b47d5f36433836267
-
SHA512
acdecc987384f8ae925829969f5ad80ac5f339f9b5a2ecadfce2434319b2f5830634fe92211d8c4a3ef31574598782c8e2755a17dd945c4b67dc0d5cdba2e485
-
SSDEEP
768:/aMrFZF03Yq/MtS9swZSKaYgm2xK7Ea4BfkxavH/na1wZCZopwLKb0aV7v5:FFZKYq/Mt4sehuVrBkYv/amZCZopwUVN
Behavioral task
behavioral1
Sample
2bb2c4be0651f02370e5da09829c904eaa193fa0c041f9e3b0820a40cd56b613.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2bb2c4be0651f02370e5da09829c904eaa193fa0c041f9e3b0820a40cd56b613.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
xtremerat
hackercool.zapto.org
Targets
-
-
Target
2bb2c4be0651f02370e5da09829c904eaa193fa0c041f9e3b0820a40cd56b613.exe
-
Size
309KB
-
MD5
6d0b197c5b4db07c0a1e434c99144ba9
-
SHA1
d6f959e7382ee28faa3ed2ea01a02368fc581cec
-
SHA256
2bb2c4be0651f02370e5da09829c904eaa193fa0c041f9e3b0820a40cd56b613
-
SHA512
f47613029c8d5888790f8a2eb89a610337c639a71ec91d4798a8c7b6180463e445c0d14cc4fb81ccf237f4679886a7988500734b188ed481dec3aaf3b5ecbb20
-
SSDEEP
1536:ksq+Q1aZQuIyJp0mgA+FJyHdAEAbLWLY:RY8QoQAEJqsLW
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-