General

  • Target

    a579638803127888421deeba6042cc4f.bin

  • Size

    37KB

  • MD5

    61e7fa9f16b10b967b02e9a068a7f7b4

  • SHA1

    24439f401fc2d19a8074cb1ff9dc0880efedb603

  • SHA256

    bc70d799dcb48522154426b341a7903ad4a9e4d7cf86935fc601a1ac21ae5d28

  • SHA512

    342a04564a50b8b09a13822a8bf2a1d53d26e93200f6f0b67e50e93f11a0a348c7d25d479389e413d8296351b6cc26d9d5e29708b01b80e44d17a0343194ba71

  • SSDEEP

    768:vmFKq/VcF47SP3Fa8IiRZYXTn2SqR7xjxmLu0CUaUOKLLvRIkTW:tq9nMVfgjn2SsVjgLu0dayLLv8

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a579638803127888421deeba6042cc4f.bin
    .zip

    Password: infected

  • 1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections