General
- Target xamster.exe
- Size 411KB
- Sample261101-pj4b2scc32
- SHA256 17a2bbad4f7725b0b39f1063c0df3cce567b56bbcd3702182968a24743a0c616
- MD5 ea67d27fca2d9f9c56912c03dd6db157
- SHA1 4d6232aa442e725f7692ec633b12e37aad01064c
- SHA512 e23ae78aac365e70b6ef20fab27558762e0d6ad77c260f1260425c6d94120c354588dc12bd7fdcc480c324ba6d1ad260268f205af4d098c34b8837e45b7f47c8
- SSDEEP 6144:rXbFAMNKF3xaJbO4l+Zn0ZF/iWc79FSMG8SC4Zr6MyyqrtLgoHKwWp8XLfXUzbFO:rLbJbO44ZnYWarCWyyqrtPH9Wp8zX
- TLSH T12A9408AC7747AA35EEE5B73440FF651887B712A2595E653F098898C13F8038ED71CE88
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
xamster.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target xamster.exe
- Size 411KB
- SHA256 17a2bbad4f7725b0b39f1063c0df3cce567b56bbcd3702182968a24743a0c616
- MD5 ea67d27fca2d9f9c56912c03dd6db157
- SHA1 4d6232aa442e725f7692ec633b12e37aad01064c
- SHA512 e23ae78aac365e70b6ef20fab27558762e0d6ad77c260f1260425c6d94120c354588dc12bd7fdcc480c324ba6d1ad260268f205af4d098c34b8837e45b7f47c8
- SSDEEP 6144:rXbFAMNKF3xaJbO4l+Zn0ZF/iWc79FSMG8SC4Zr6MyyqrtLgoHKwWp8XLfXUzbFO:rLbJbO44ZnYWarCWyyqrtPH9Wp8zX
- TLSH T12A9408AC7747AA35EEE5B73440FF651887B712A2595E653F098898C13F8038ED71CE88
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects SectopRAT aka Arechclient2