Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
11/02/2025, 11:03
Behavioral task
behavioral1
Sample
a7521ef22ed6639bd6ebd7c46f9728657cf5d1b51c039f3fe67b0c29efaeeedf.exe
Resource
win7-20241010-en
4 signatures
120 seconds
General
-
Target
a7521ef22ed6639bd6ebd7c46f9728657cf5d1b51c039f3fe67b0c29efaeeedf.exe
-
Size
252KB
-
MD5
7b102a452505ed401f8dd1817025deb6
-
SHA1
995555215aede21d8b2568c3a025d164d59aac0a
-
SHA256
a7521ef22ed6639bd6ebd7c46f9728657cf5d1b51c039f3fe67b0c29efaeeedf
-
SHA512
f8f7cf78fc7e63448de83065b05ff92f51fe164668211959dcf4eaa1883409a80967603d98496693b960fb99264b1bb9a9fd862aac82132ff0d9e07c5ec32b19
-
SSDEEP
1536:py4yRUHlrL1lr6an3TLuvm2hopO6MQWRvy4yRUHlrL1lr6an3TLuvm2EopO6MQWd:py4yRUZ7vkokXQAvy4yRUZ7vlokXQAX
Score
10/10
Malware Config
Signatures
-
Detect XtremeRAT payload 1 IoCs
resource yara_rule behavioral1/memory/2136-2-0x0000000000C80000-0x0000000000CBF000-memory.dmp family_xtremerat -
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-
resource yara_rule behavioral1/memory/2136-2-0x0000000000C80000-0x0000000000CBF000-memory.dmp upx