Overview

overview

10

Static

static

10

4cc385e8c2...18.exe

windows7-x64

10

4cc385e8c2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4cc385e8c2b763a1430f891373e0c693_JaffaCakes118

  • Size

    187KB

  • MD5

    4cc385e8c2b763a1430f891373e0c693

  • SHA1

    46b3a51aacd2a242d653ce9faf509187d6249bd6

  • SHA256

    55c43326f1cd6e7234dee063f049f260b8e0359b935fb0e0be5d64d05dcf63a6

  • SHA512

    f53ce752ed781e55e1bbe64153435afed9fa0ce665af276ea1a0220bf7d48833beb11c96b2f16a323098a262e8c977de3fd21944bb55493f1147d3aa20f66247

  • SSDEEP

    3072:+NW7dEvotvX0vueOdjZt/IRlz6VlfOkCUklC7oZ/tD6z+Dd5VxlXpmupiwkiX6mE:+NW7mvIOueOdtt/IRclmHCotD6z+DJpm

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cc385e8c2b763a1430f891373e0c693_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections