General
-
Target
183fb0c54505c97b59883b71ed75db2aa11429fac6e0c83b47d5f36433836267
-
Size
40KB
-
MD5
beb9c191b1e7025a22fe757d34f14c67
-
SHA1
b9f92c5a5e9540ea2bd0ccc24edf1d9d10997043
-
SHA256
183fb0c54505c97b59883b71ed75db2aa11429fac6e0c83b47d5f36433836267
-
SHA512
acdecc987384f8ae925829969f5ad80ac5f339f9b5a2ecadfce2434319b2f5830634fe92211d8c4a3ef31574598782c8e2755a17dd945c4b67dc0d5cdba2e485
-
SSDEEP
768:/aMrFZF03Yq/MtS9swZSKaYgm2xK7Ea4BfkxavH/na1wZCZopwLKb0aV7v5:FFZKYq/Mt4sehuVrBkYv/amZCZopwUVN
Score
10/10
Malware Config
Extracted
Family
xtremerat
C2
hackercool.zapto.org
Signatures
-
Detect XtremeRAT payload 1 IoCs
-
Xtremerat family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
183fb0c54505c97b59883b71ed75db2aa11429fac6e0c83b47d5f36433836267
Password: infected
-
2bb2c4be0651f02370e5da09829c904eaa193fa0c041f9e3b0820a40cd56b613.exe
70703a9e547c77f1d24bd30aaa4eebf9
Headers
Imports
Sections