Overview

overview

10

Static

static

10

01650889d4...18.exe

windows7-x64

10

01650889d4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01650889d43da57fa7d295889af0a7837d67d89f1afe98c3e8c7d7682ec66418

  • Size

    692KB

  • Sample

    241102-xsl35ashnm

  • MD5

    a56fe0eb35c224af3da47d13d404df10

  • SHA1

    962cff1fbb5389a0d51a4291fa7472ec4bb706b7

  • SHA256

    01650889d43da57fa7d295889af0a7837d67d89f1afe98c3e8c7d7682ec66418

  • SHA512

    73c1bade8d9b1e4b5504474b7d000561edc8630fbae1052bb0db4655b3522c870ba64f243aad24a65b50cf5ca2fb6c4fcb95812c9d5721b9684c13be73a9c1ef

  • SSDEEP

    1536:CsqTsq+QV4rObAdXWpf/y+joCAefmsqTsq+QV4rObAdXWpf/y+qoCAef:j44rj/6oCAefP44rj/7oCAef

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      01650889d43da57fa7d295889af0a7837d67d89f1afe98c3e8c7d7682ec66418

    • Size

      692KB

    • MD5

      a56fe0eb35c224af3da47d13d404df10

    • SHA1

      962cff1fbb5389a0d51a4291fa7472ec4bb706b7

    • SHA256

      01650889d43da57fa7d295889af0a7837d67d89f1afe98c3e8c7d7682ec66418

    • SHA512

      73c1bade8d9b1e4b5504474b7d000561edc8630fbae1052bb0db4655b3522c870ba64f243aad24a65b50cf5ca2fb6c4fcb95812c9d5721b9684c13be73a9c1ef

    • SSDEEP

      1536:CsqTsq+QV4rObAdXWpf/y+joCAefmsqTsq+QV4rObAdXWpf/y+qoCAef:j44rj/6oCAefP44rj/7oCAef

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks