Overview

overview

10

Static

static

10

b5a2271a24...18.exe

windows7-x64

10

b5a2271a24...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5a2271a2417b8658a1417890c29e338_JaffaCakes118

  • Size

    24KB

  • MD5

    b5a2271a2417b8658a1417890c29e338

  • SHA1

    b73c2db31e4d5555d3bb2379f7626fd7d9732b16

  • SHA256

    28ac693f72366a77f3805bd7ad83bf1b43e4daa79652673267ce67a092b6d250

  • SHA512

    58cbbc3f5e9d60a9c7d1e50e2abcf7c5c0469f6b8b14e4959e88dc7e1422faace06e5ae2934095e90813d6ec13a032f8ecaea064e15403538df614c2d17fc8d8

  • SSDEEP

    384:YIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZN4GL97oQ4DvteSVz6UwvNekC:YIsF81fG9QveLOYTe5YiwGL97oQvSAU7

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5a2271a2417b8658a1417890c29e338_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections