Overview

overview

10

Static

static

10

4ab9ccfeb3...18.exe

windows7-x64

10

4ab9ccfeb3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ab9ccfeb3c7e3cb3a4e14a4632a7c1c_JaffaCakes118

  • Size

    21KB

  • MD5

    4ab9ccfeb3c7e3cb3a4e14a4632a7c1c

  • SHA1

    e136eff6f0d3fdf2dbaaa633b9fcecc8e5917b7a

  • SHA256

    73bb8dc02907b0c7725ee2c021661e52d52160b9afd23f42b09feb2639746336

  • SHA512

    42ca171d7c3a46c57c6a248ef02e576e4bdc34106d0f60902fd71829292017a425d8dd48b21616852ab3295a68a96d5dd54b84b0aa45d6450cb68cfb9704a518

  • SSDEEP

    384:r2IdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNlrRQ8Hpb1DZn6ziQqSpLR:qIsF81fG9QveLOYTe5YiNRzHZ1pQt

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ab9ccfeb3c7e3cb3a4e14a4632a7c1c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections