Overview

overview

10

Static

static

10

6239060313...18.exe

windows7-x64

10

6239060313...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6239060313c9a9d8a6b3b8097907f3f1_JaffaCakes118

  • Size

    33KB

  • MD5

    6239060313c9a9d8a6b3b8097907f3f1

  • SHA1

    7029af8c9c10e7391103f0f7bd46ecef74d71aaa

  • SHA256

    ee2427f1716baa622b20d1eaf37f10f4e4ba65026ab6fdb4fb4afa2b5a382afa

  • SHA512

    6e741de430c1f74557caa85e23a065fb73b5c066156fe49f5a7e7211f890d62840baae105d28586a85560f65b812da24b63fe4ab322663c54480c2110b57c4eb

  • SSDEEP

    768:VMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lotzu/ryCFaj:eNW71rcYDAWeotvXluGB2

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6239060313c9a9d8a6b3b8097907f3f1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections