Overview

overview

10

Static

static

10

camfrog f...om.exe

windows7-x64

10

camfrog f...om.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    camfrog flood room.exe

  • Size

    39KB

  • MD5

    c63ec2099f6f4f11e4cbd598199c5ef1

  • SHA1

    161b6124fea56b1d2ed2808a534ad7365fa19e03

  • SHA256

    49c81e87f20dc741640f2411c58f9b33e3bfc764c85f2f33705d8e3f1f8c2fa8

  • SHA512

    c75be5c3be10432f46568b4ab424e2619dc391876ac9bcd4877826103ec94244956e2b9c00ebd68c8674507565baca3527afa682dc22967ee3fd37cb634793b2

  • SSDEEP

    768:nMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lxUGbDaVz4txSAp8M0:MNW71rcYDAWeotvXl/ySYA0

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • camfrog flood room.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections