Resubmissions

19/08/2024, 14:33

240819-rwzwhazbna 10

19/08/2024, 14:29

240819-rtn18asfrr 10

General

  • Target

    ab645ff250fe3265476bec8360e9c5db_JaffaCakes118

  • Size

    33KB

  • MD5

    ab645ff250fe3265476bec8360e9c5db

  • SHA1

    e4052b8a1fb689b90cb2a5f6b45f23ccd7b5ec39

  • SHA256

    0a41e621daf03ccf0ac46ae5560818afb29b790596be546ecef47af5356e6cc0

  • SHA512

    c7308cbabedac6587f39a06225c32d8906781443076f84e6301380d779a96107b5871a21c6d9bd826bfc40450142df0c6d1e3dc844272d73c019d0a22461cc52

  • SSDEEP

    768:pMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l5vI0tLBOsr:iNW71rcYDAWeotvXlBIGOs

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ab645ff250fe3265476bec8360e9c5db_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections