Overview

overview

10

Static

static

10

6af62d703c...18.exe

windows7-x64

10

6af62d703c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6af62d703cbe1be495ecd32db8d7a924_JaffaCakes118

  • Size

    19KB

  • MD5

    6af62d703cbe1be495ecd32db8d7a924

  • SHA1

    707b8729160ffc478b9c8b3147dc26fe23e9fedd

  • SHA256

    7169c76efa50b29f096bc2ddbfcaa569cce0207a86815c05e4bf9aa7febb3d73

  • SHA512

    99cac6b59507d01bfcc9ead5081753072e528344f3901e5435162bae8dca05f3bb43c47aa24b3c83e21a6344b3c213b8b203a6bec24c5cb8a427dcb7a5820eab

  • SSDEEP

    384:iPHKZfuH87GowDqGoMwevqxP6k6zIDwPVBSzTGuwcAMa7R:bZfuHUvwDKP6kMpmGum

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6af62d703cbe1be495ecd32db8d7a924_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections