Overview

overview

10

Static

static

10

fc94c90a12...18.exe

windows7-x64

10

fc94c90a12...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc94c90a12d23390443d2822f40dc38c_JaffaCakes118

  • Size

    85KB

  • Sample

    240420-mt4z8afc3s

  • MD5

    fc94c90a12d23390443d2822f40dc38c

  • SHA1

    5a401e38129d2ade1823b381e3c1910ef00ded2d

  • SHA256

    17ae48c218dd0bf7f88e6e5e25c5bb9c62c110f01606d8b4ea15f0a1ee8e4a1d

  • SHA512

    b8dd8fbd82384915db8442aca8ee5c907f4c9dc7dd1ff97cfe7f8ece4e5a16f68b38cba93cc9524f6ed93180aae3c3f37b4f2525e83733477e4b3f3b7fe1f165

  • SSDEEP

    768:Ym1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoNL:7sq+QV4rObAdXWpf/y+7ozNwiGfEftog

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      fc94c90a12d23390443d2822f40dc38c_JaffaCakes118

    • Size

      85KB

    • MD5

      fc94c90a12d23390443d2822f40dc38c

    • SHA1

      5a401e38129d2ade1823b381e3c1910ef00ded2d

    • SHA256

      17ae48c218dd0bf7f88e6e5e25c5bb9c62c110f01606d8b4ea15f0a1ee8e4a1d

    • SHA512

      b8dd8fbd82384915db8442aca8ee5c907f4c9dc7dd1ff97cfe7f8ece4e5a16f68b38cba93cc9524f6ed93180aae3c3f37b4f2525e83733477e4b3f3b7fe1f165

    • SSDEEP

      768:Ym1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoNL:7sq+QV4rObAdXWpf/y+7ozNwiGfEftog

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks