General

  • Target

    19558886810.zip

  • Size

    45KB

  • MD5

    568dc4b6080c7292e4a7b9bcd7089b20

  • SHA1

    8856676e5d2c93e49d61aaec2f510a76e9155a62

  • SHA256

    c8a0c1715605c5ef4e499770b896e3249ed45fc93da615942350c292a2c4fb8b

  • SHA512

    7b30d26c3ec96666b3cb6aceb7fca3f3a71ce60a81f754be84529df2667341f435e2c106e2f548d1f7ed88e1b5b6ace711056d8bc261b6ebac79b88a7a3970b6

  • SSDEEP

    768:XdjAkeblWWLY4+Q6/x0pjsPcf7b0JDAv4PoiuX3FdLdTOOQbeZMUwBPZ/DXd:R/OljY4VCx0+E7bADAv4vuXTLVOOSbUc

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 19558886810.zip
    .zip

    Password: infected

  • 7950cad15d37d679765ae2ad609502f0471a5e530f9decd994da8b739c1254be
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections