Overview

overview

10

Static

static

10

adfa4a29b6...18.exe

windows7-x64

10

adfa4a29b6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    adfa4a29b64fdc878134b76d372ea3cb_JaffaCakes118

  • Size

    33KB

  • MD5

    adfa4a29b64fdc878134b76d372ea3cb

  • SHA1

    62e3266b8f2a3970edde670a0fd3238d17d6fd39

  • SHA256

    0b114d95aeb504ac1c90238f7beee685aa00c1fd3119802db112f93ae30e8f27

  • SHA512

    9f55981f473b4a0809e5f051643cfe285860f43b35f4c2a625b3ccbdd710b4857b3889fc1d82b88b9330564d2792178f041cdafac8c5669b03a92e525ba77537

  • SSDEEP

    768:XMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lGtzdomXYPdp:8NW71rcYDAWeotvXlspcPd

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • adfa4a29b64fdc878134b76d372ea3cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections