Extracted

• • Target

    a6016a5b7157970918f2b3b85d7355a4dfb6f8a325146a79d87e24eefb1ec6a8.exe

  • Size

    823KB

  • MD5

    f1bd85dc3f579f451d3b60e25e9d68e4

  • SHA1

    cbd2f880a5852ea094560ce14de7d2e4dceab067

  • SHA256

    a6016a5b7157970918f2b3b85d7355a4dfb6f8a325146a79d87e24eefb1ec6a8

  • SHA512

    d6b855b2cbf6fa27ac845d6483ba79c9ebe50603d5f760b9789a0a1a8f9b1ffcfdcee45b7c3e26f330e5f6dcde57acd407176d76ef3f67966318da5b4e7e8ff3

  • SSDEEP

    12288:U69zDWz/xwNqdlbrIX3JALF1QbOagrEGgtNryyCJuDT/PNa0AYQ/Hyw2Ee:U2DW/xbHX2YIbCQsu3/PNL7Q/HyVEe

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Executes dropped EXE

  behavioral1behavioral2