General

  • Target

    5449cfd2164d003115510ac61daf3243cf97db21d677d5a3144a77c5572d3691.exe

  • Size

    558KB

  • MD5

    b1d86a3bbac67a44086df9c90fe30700

  • SHA1

    a378e1713b2a5ace554c9b29e622a49c52161931

  • SHA256

    5449cfd2164d003115510ac61daf3243cf97db21d677d5a3144a77c5572d3691

  • SHA512

    a96fb52241f0ddd4c2fedfc67ed5b645c7730cc1e3cc842139bf1094b37dca9f45f67f0e823e81748f75f59d96c8cedd9e392685cee0e7dacb500d1cfeb6be4f

  • SSDEEP

    6144:OwW8yO1I3FODqRQ290R0++gQaCJFF8DipytmjRXI1ODsGT0D5q+LtlmzyupgOwKi:pyZ3FZG++pDvtSsg01vazrpgOw

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5449cfd2164d003115510ac61daf3243cf97db21d677d5a3144a77c5572d3691.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections