Overview

overview

10

Static

static

10

ffdde495c7...18.exe

windows7-x64

10

ffdde495c7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffdde495c733ffcf4a235105629bf0be_JaffaCakes118

  • Size

    62KB

  • Sample

    240421-wtjhysgf36

  • MD5

    ffdde495c733ffcf4a235105629bf0be

  • SHA1

    872ae95d9530b21b39b17c20089931f8161266d2

  • SHA256

    f36dea341530dfbff64b82cfb4afc0b2e369bb6098eac37cdb7976bd134964f9

  • SHA512

    4b1b9501105eb669159460064dddaef951da6850d92620bcee6f1a4846f6aa982e7059e678a9ca027bfdd29ebce7375bb1e68bbdc0666757174ea4def9215a14

  • SSDEEP

    1536:j8qDqQMKgMK3t/jbNwPZ6ZAeXHWwleNX3G:jqcXKd/geXHWeD

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      ffdde495c733ffcf4a235105629bf0be_JaffaCakes118

    • Size

      62KB

    • MD5

      ffdde495c733ffcf4a235105629bf0be

    • SHA1

      872ae95d9530b21b39b17c20089931f8161266d2

    • SHA256

      f36dea341530dfbff64b82cfb4afc0b2e369bb6098eac37cdb7976bd134964f9

    • SHA512

      4b1b9501105eb669159460064dddaef951da6850d92620bcee6f1a4846f6aa982e7059e678a9ca027bfdd29ebce7375bb1e68bbdc0666757174ea4def9215a14

    • SSDEEP

      1536:j8qDqQMKgMK3t/jbNwPZ6ZAeXHWwleNX3G:jqcXKd/geXHWeD

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks