Overview

overview

10

Static

static

10

8cb61e22f9...18.exe

windows7-x64

10

8cb61e22f9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cb61e22f9379ad22c04322ad8752f80_JaffaCakes118

  • Size

    21KB

  • MD5

    8cb61e22f9379ad22c04322ad8752f80

  • SHA1

    57ab03363cd0d5e93556b8cef8874c8bafb9cae5

  • SHA256

    ea3e88838ca7860b5351c334eacf7781ec457ac92c0cce43493a4f9cd4694c42

  • SHA512

    0becd0baddbd9e1a75e29749a52319b621c40a63443ae0bac801a0e918ae3335de6cd85ee894effd78b5e7097e2b87ad534faeab97e903da8edb962f0ed0fac0

  • SSDEEP

    384:rRIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNl6pQ4sb1CJbh2SVlpLR:tIsF81fG9QveLOYTe5Yi0pQ/18VVVZ

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cb61e22f9379ad22c04322ad8752f80_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections