Extracted

• • Target

    a95aa8f30ca55435085536fa44267ebe_JaffaCakes118

  • Size

    45KB

  • MD5

    a95aa8f30ca55435085536fa44267ebe

  • SHA1

    75eee9f9eed3b142c0187a38ad7df62181254c81

  • SHA256

    5f3bd6c7e98fd1a5af9cfc95f2ff61670db0099a52caeaeae90ce527d0736a33

  • SHA512

    b9c2d511f70a5d53ea51bf01288eb9d96b41808d356ae1b235a8da7d91cc37721f36f14fdf049f5e54dc6555beca5916844d1fe42199a55b71a43d26d1e2ecea

  • SSDEEP

    768:PBr+tjFY90iY6W1jwmDzKgEFQXaklMIAn0tYCpPQzoEv:ZyRh31jxPEFQXak+05QoEv

  Score

  10^/10

  xtremeratpersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Modifies Installed Components in the registry

    persistence

  • Deletes itself

  • Adds Run key to start application

    persistence
  behavioral1behavioral2