Overview

overview

10

Static

static

7

00a6a32d9e...18.exe

windows7-x64

10

00a6a32d9e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00a6a32d9ee231ce261909c8406c5062_JaffaCakes118

  • Size

    668KB

  • Sample

    240619-1jqazaxdln

  • MD5

    00a6a32d9ee231ce261909c8406c5062

  • SHA1

    77ad47173143ac3a62884f1d72e3db5d22a2a0e4

  • SHA256

    4fe3d413254f17a34e0a08fc3e8ffc95d77c66907b1731fa6538cea9fc6f63ce

  • SHA512

    f93cc051e44400cb05b9c40476bd78741a44b3b182fdf3045b62a0788c89017f4267ef86057ce7f7b3917a2c4dc9bc5a3958f8c70feacef7f7810b7074e95903

  • SSDEEP

    1536:JcPWlJ71p8ch91dnyReASA7i3WE7zz5byTHEKqpTcWQJzwPR4:Jc2t71dnESA7i3DL5byIKqpY3SR4

Score
10/10
xtremeratpersistenceratspywareupx

Malware Config

Targets

    • Target

      00a6a32d9ee231ce261909c8406c5062_JaffaCakes118

    • Size

      668KB

    • MD5

      00a6a32d9ee231ce261909c8406c5062

    • SHA1

      77ad47173143ac3a62884f1d72e3db5d22a2a0e4

    • SHA256

      4fe3d413254f17a34e0a08fc3e8ffc95d77c66907b1731fa6538cea9fc6f63ce

    • SHA512

      f93cc051e44400cb05b9c40476bd78741a44b3b182fdf3045b62a0788c89017f4267ef86057ce7f7b3917a2c4dc9bc5a3958f8c70feacef7f7810b7074e95903

    • SSDEEP

      1536:JcPWlJ71p8ch91dnyReASA7i3WE7zz5byTHEKqpTcWQJzwPR4:Jc2t71dnESA7i3DL5byIKqpY3SR4

    Score
    10/10
    xtremeratpersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks