Overview

overview

10

Static

static

10

37626a2cd4...18.exe

windows7-x64

10

37626a2cd4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    37626a2cd49161c88c943e21538b3dd5_JaffaCakes118

  • Size

    19KB

  • MD5

    37626a2cd49161c88c943e21538b3dd5

  • SHA1

    1369a881ff7005b3a2ca74a26c573964a38886d5

  • SHA256

    7800d0e27458768ae189fb2591035d61995973b2805b1efc70f2cd2dc14cc56d

  • SHA512

    66ca53b7cdf8411047d572f867e7fe8cf6614bb9aa05d37fcd592c9f4fdd425a23b10490de2ec6c37d1b7380698ec4cb3c134ef6b8779b9e4068b1becff65af6

  • SSDEEP

    384:wYHKZfuH87GowDqGoMwevqxP6k6zIDwPVBSpdo0eoNdoc7R:SZfuHUvwDKP6kMp6dxtNaW

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 37626a2cd49161c88c943e21538b3dd5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections