Overview

overview

10

Static

static

10

c8bf965735...18.exe

windows7-x64

10

c8bf965735...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8bf9657352e5e51a956d77f9b986ab5_JaffaCakes118

  • Size

    38KB

  • MD5

    c8bf9657352e5e51a956d77f9b986ab5

  • SHA1

    ac11229dcd3dbdebb22e5a4ff78c494d46eb56c9

  • SHA256

    e3ace160dc056dba8dd375bd7c4e60a3c0ef47084c83fce77fd4c6b06f0b010a

  • SHA512

    538ca012d1ba731e8fa3e0a8f358a004334c924a0e9c1d3fcce625c5464b593d9d2a0bbe3aed62326df52772586e3a96160170ce466445474245d7689c4e8768

  • SSDEEP

    768:xMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgVzD4F:aNW71rcYDAWeoDrsgvu

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c8bf9657352e5e51a956d77f9b986ab5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections