Overview

overview

10

Static

static

3

fcd97dcbcd...18.exe

windows7-x64

10

fcd97dcbcd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcd97dcbcd51d79bba351e86141a818a_JaffaCakes118

  • Size

    70KB

  • Sample

    240420-qks35she99

  • MD5

    fcd97dcbcd51d79bba351e86141a818a

  • SHA1

    97f5b790d1156adc89358f3ded8fff30ed03e288

  • SHA256

    2d963ba8b3f99395cfba25a4f79b49bfc6106e9e5176df01b322dd96a56a9bb8

  • SHA512

    697ef01aa74395ffecd5ed2b7459646f67e51b7ee07cf8d44c74614fb59d1709b73d88ecd4367356db353d18c1ef95ffca5ec880b22a0f2fdf74716d283fb814

  • SSDEEP

    1536:nwda5dfLEtuOisPNm+NR7aIlrqa8LuTD1:Ca5dANis1m+NwIMKd

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      fcd97dcbcd51d79bba351e86141a818a_JaffaCakes118

    • Size

      70KB

    • MD5

      fcd97dcbcd51d79bba351e86141a818a

    • SHA1

      97f5b790d1156adc89358f3ded8fff30ed03e288

    • SHA256

      2d963ba8b3f99395cfba25a4f79b49bfc6106e9e5176df01b322dd96a56a9bb8

    • SHA512

      697ef01aa74395ffecd5ed2b7459646f67e51b7ee07cf8d44c74614fb59d1709b73d88ecd4367356db353d18c1ef95ffca5ec880b22a0f2fdf74716d283fb814

    • SSDEEP

      1536:nwda5dfLEtuOisPNm+NR7aIlrqa8LuTD1:Ca5dANis1m+NwIMKd

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks