General

  • Target

    72698a5cc68a39003683a7eb67c7a3349858ba6450d5b48cf194577251e25b8c

  • Size

    34KB

  • MD5

    961a243970d430851399e78ccd789a1b

  • SHA1

    b0f0aa0517c439169881dec847906e41c4b8df29

  • SHA256

    72698a5cc68a39003683a7eb67c7a3349858ba6450d5b48cf194577251e25b8c

  • SHA512

    b015e63b600160d5f68e2b71e63470552294081bac9b8efe7da74e1be6cc06217fb5d3946a7e6292b5c89797d899bea414cb366e89d8c47b1138e6aa4f8e203a

  • SSDEEP

    768:tYf1S+H5kf7axbZHyvaaPd4FxIQJ+oJ6c0uY652nfMr3i0fY7yNw6FEgBCZ2:ef1Sk5t1Hyv/lAJ+26cmW2fMrVCN67

Score
10/10

Malware Config

Extracted

Family

xtremerat

C2

net16.net

uriel-productions.net16.n

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72698a5cc68a39003683a7eb67c7a3349858ba6450d5b48cf194577251e25b8c
    .zip

    Password: infected

  • e500905dc0d2e2840df0432e54e7820c37d951bf26829b58565bab0d44de7061.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections