Overview

overview

10

Static

static

10

server.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    server.exe

  • Size

    62KB

  • Sample

    241107-zg4vxayckk

  • MD5

    19a77f3d8e4cdb9c961bea7dd9a85ac8

  • SHA1

    e79423d3798ebde9f5bce660e82747f6e48b7a46

  • SHA256

    444b623214a35b2c172e5235212e84e16d05ef82d619014d65e1892fc0b246c5

  • SHA512

    bad64396ea861757f522ec904501b5a341dcc8d3a9afeb675a7324863d2b16f6baf13476f46be297ffc0dfd5c3b4f2f21a5e65bcc1b6caef51a6b409e45a9cda

  • SSDEEP

    1536:sT8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX33:SqMyKdcPeXHW5j

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      server.exe

    • Size

      62KB

    • MD5

      19a77f3d8e4cdb9c961bea7dd9a85ac8

    • SHA1

      e79423d3798ebde9f5bce660e82747f6e48b7a46

    • SHA256

      444b623214a35b2c172e5235212e84e16d05ef82d619014d65e1892fc0b246c5

    • SHA512

      bad64396ea861757f522ec904501b5a341dcc8d3a9afeb675a7324863d2b16f6baf13476f46be297ffc0dfd5c3b4f2f21a5e65bcc1b6caef51a6b409e45a9cda

    • SSDEEP

      1536:sT8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX33:SqMyKdcPeXHW5j

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks