xtremerat | 7635820815d5e249ba90931ba32f70c1_JaffaCakes118

General

Target

7635820815d5e249ba90931ba32f70c1_JaffaCakes118
Size

489KB
MD5

7635820815d5e249ba90931ba32f70c1
SHA1

8f676a92c378c6d67af5db6bd012c9943a979011
SHA256

bbcd9cd4a24ade21beb738ef84fa10afd475ecef65108ec29405b414ed34ce99
SHA512

0352f10d28a044ff18cd35c9d61c8a3a496e3e9e3a88dd20d6d916b929ae19844e84c5632c97a7088607ef169a05f21da106ac93597a2fd601cba883c62bcdb2
SSDEEP

3072:P1Cn0kBGhqUkDIshyfNdzRRdFNvNXLo/6CQBGhqUkDIshyftdzVRdPNLN:PcnSEynzLPNhLWjBEyHz3lN

Score

10^/10

upx xtremerat

Detect XtremeRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_xtremerat
Xtremerat family
xtremerat
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_xtremerat

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7635820815d5e249ba90931ba32f70c1_JaffaCakes118