Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
03-02-2025 04:45
General
-
Target
c496a70b4306e9845bc668e5f355af4a53abb4653e9a1553bb47c5fc5224cdb6.exe
-
Size
65KB
-
MD5
71f728ae4c5820eda194a5c305977a75
-
SHA1
19e0ec03be87a14b3d774481e76b0a8564dccff2
-
SHA256
c496a70b4306e9845bc668e5f355af4a53abb4653e9a1553bb47c5fc5224cdb6
-
SHA512
4f1069587bde83d70493c90625678567f92d510a1e715cf90469a60b98776b080332180b7ded75e34f97ff594244b2df20d6d6d2d2766025661d9ef51586b17b
-
SSDEEP
768:l9m1Sq4NQkrBsH1Uzz05De1QuMVTSN8iJHoX7Vmu6AeXVtWAJ7A+7voNwcSQZ:Ssq+Q1JaQuISJJUmFA+FJ0LNwaZ
Malware Config
Signatures
-
Detect XtremeRAT payload 6 IoCs
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c496a70b4306e9845bc668e5f355af4a53abb4653e9a1553bb47c5fc5224cdb6.exe"C:\Users\Admin\AppData\Local\Temp\c496a70b4306e9845bc668e5f355af4a53abb4653e9a1553bb47c5fc5224cdb6.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
288KB
-
Filesize
288KB
-
Filesize
288KB
-
Filesize
288KB
-
Filesize
288KB
-
Filesize
288KB