Overview

overview

10

Static

static

10

efaf9583f5...18.exe

windows7-x64

10

efaf9583f5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efaf9583f501557601f7acc59d1a7d32_JaffaCakes118

  • Size

    62KB

  • MD5

    efaf9583f501557601f7acc59d1a7d32

  • SHA1

    462da960c5f411ff2002cc2d68b9876ed0358b29

  • SHA256

    f7e19d70e0f46d87c813bd371e752261436437d721dc9a99fb81c39420621c8d

  • SHA512

    523de41e53d09448bdaf5a108de13269b00c79485fbcb449c4d265a8124c9b735fa13e4e972020385d291ede43f76a3d5845719462fe1312dee1b42da5d67526

  • SSDEEP

    1536:hNW71rcYDAWeotvXliBghB29g4p9GDRlzch9QBUiAESG6m:hNW7dEvotvXmgj264zaQQB

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • efaf9583f501557601f7acc59d1a7d32_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections