Overview

overview

10

Static

static

10

c64692d038...5f.exe

windows7-x64

10

c64692d038...5f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c64692d038f1cc601fa41b9592a7d8159fe35c3cc209ed98e2948dd97c2b035f

  • Size

    692KB

  • Sample

    250108-jta6cstjhk

  • MD5

    b1ccd2bee2616c81f4d1799ac0dbb0f5

  • SHA1

    42d7e9b6438902ed94f9e0f1d688503213ad3c2d

  • SHA256

    c64692d038f1cc601fa41b9592a7d8159fe35c3cc209ed98e2948dd97c2b035f

  • SHA512

    ac37b74a8c4eb02a308b0fd48355724c1b500e7d4990a143089e05c8081b9d7a020647c10ee81dbf2ec99e68b988daca83c6c3b2924a6392f91453151bf03548

  • SSDEEP

    1536:0sqTsq+QV4rObAdNoAf5UqyYedo1WB9tTbsqTsq+QV4rObAdNoAf5UqyYeu8o1Wp:Z44rOBjo1WBbTG44rOBlo1WBbT

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      c64692d038f1cc601fa41b9592a7d8159fe35c3cc209ed98e2948dd97c2b035f

    • Size

      692KB

    • MD5

      b1ccd2bee2616c81f4d1799ac0dbb0f5

    • SHA1

      42d7e9b6438902ed94f9e0f1d688503213ad3c2d

    • SHA256

      c64692d038f1cc601fa41b9592a7d8159fe35c3cc209ed98e2948dd97c2b035f

    • SHA512

      ac37b74a8c4eb02a308b0fd48355724c1b500e7d4990a143089e05c8081b9d7a020647c10ee81dbf2ec99e68b988daca83c6c3b2924a6392f91453151bf03548

    • SSDEEP

      1536:0sqTsq+QV4rObAdNoAf5UqyYedo1WB9tTbsqTsq+QV4rObAdNoAf5UqyYeu8o1Wp:Z44rOBjo1WBbTG44rOBlo1WBbT

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks