Overview

overview

10

Static

static

3

ed742c6938...18.exe

windows7-x64

10

ed742c6938...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed742c6938d9c3af1f6700a67fe93749_JaffaCakes118

  • Size

    461KB

  • Sample

    240411-pzlryaeh6t

  • MD5

    ed742c6938d9c3af1f6700a67fe93749

  • SHA1

    e915c34940a1e61daaef926e9f130cb42e002ddb

  • SHA256

    089f0f9825c7fee5ac4900324a732dfffecb1beebc1cba295a83b2553f801074

  • SHA512

    addd52e8e395ed963f89905b633ea8de98e0df035ba00ffe4b200b3b970e3405d9f740a0468dadf8e56c20fd9b18801fba0f0329552db0963dbf92d03321e5c3

  • SSDEEP

    12288:Tn/9MaqxKMybYI+1Q4NNuE2XZ29qxVjPk7DkN+:7lMaqxPIWf3qDgH

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Extracted

Family

xtremerat

C2

lepra.zapto.org

Targets

    • Target

      ed742c6938d9c3af1f6700a67fe93749_JaffaCakes118

    • Size

      461KB

    • MD5

      ed742c6938d9c3af1f6700a67fe93749

    • SHA1

      e915c34940a1e61daaef926e9f130cb42e002ddb

    • SHA256

      089f0f9825c7fee5ac4900324a732dfffecb1beebc1cba295a83b2553f801074

    • SHA512

      addd52e8e395ed963f89905b633ea8de98e0df035ba00ffe4b200b3b970e3405d9f740a0468dadf8e56c20fd9b18801fba0f0329552db0963dbf92d03321e5c3

    • SSDEEP

      12288:Tn/9MaqxKMybYI+1Q4NNuE2XZ29qxVjPk7DkN+:7lMaqxPIWf3qDgH

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks