Overview

overview

10

Static

static

10

495756dd07...18.exe

windows7-x64

10

495756dd07...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    495756dd07df0608f070c436759da592_JaffaCakes118

  • Size

    33KB

  • MD5

    495756dd07df0608f070c436759da592

  • SHA1

    b4f9e7290479e5245b3ff0a556b8fd138b9077ad

  • SHA256

    a957191967f90be4d709d57040f1c59cd065df98f7bd472c77abe6f4f09a4675

  • SHA512

    fbc55917b1b7ee11f1a0850117c5a7fa4f26b1e97fc03f5b7b846f174adaba5a2087b34d4638362c56b03e0014cb20366a3e353db7adb07ead12e8d9aecc214d

  • SSDEEP

    768:CMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lZtzWs:/NW71rcYDAWeotvXlf

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 495756dd07df0608f070c436759da592_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections