Managed XDR

remote-access-windows6...4-offline.exe_icon.exe — malware analysis report

File info

Filename
remote-access-windows64-offline.exe_icon.exe
File type
PE32+ executable (GUI) x86-64, for MS Windows
File size
7.2 MB
First seen
Last seen

Environment

w10/x64 en

Hashes

SHA1
de87483b59c88a404ab06222954359bd76fb77b4
SHA256
ed16de25bdae431d2613a6eb3b283415dd884f417438e290251bf54ecc4d6d99
MD5
a7c13a6bc69f7d7e3adc011073d050fd

Signatures

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data

Other

yara_rules: Static rules
require_administrator: Requests administrator privileges
suspicious_network_port: Performs TCP or UDP request to non-standard port
pe_overlay: PE file contains overlay
Managed XDR