General
-
Target
11c99f1dc9225822c1a24069b071d00be0c5455b27f88603e9d5106169ac92cc
-
Size
39KB
-
MD5
d04e9291a10926188632939fc471113f
-
SHA1
a75fe61b37a1bf77ad79e84ba4d8026b73a4eefd
-
SHA256
11c99f1dc9225822c1a24069b071d00be0c5455b27f88603e9d5106169ac92cc
-
SHA512
ee283e5605ec28af3c45f4b1e5c96caad9bbd3174c27dc295eb539d4e7f3ab2a11d646bcac6a1db42d9ed1dc1eccb4e0bbdb5fdf3184825337bbef67fbf4856f
-
SSDEEP
768:FG44ya3J9n77j5d429QxfpbbfUTmn/YDEHZsU0ql/zZAHG3j45FaSW9TZoHs:FG4XaZV4OQxRbfUTrDE2EtSr5FSBZ8s
Score
10/10
Malware Config
Extracted
Family
xtremerat
C2
hackercool.zapto.org
Signatures
-
Detect XtremeRAT payload 1 IoCs
-
Xtremerat family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
11c99f1dc9225822c1a24069b071d00be0c5455b27f88603e9d5106169ac92cc
Password: infected
-
da23d1b2f06e219f028548cc2823aa4c2b251f5513f8502d82337c3acfcd5c82.exe
Headers
Sections