Overview

overview

10

Static

static

10

001b58afd4...18.exe

windows7-x64

10

001b58afd4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    001b58afd4b0657b4a4594cef54b4547_JaffaCakes118

  • Size

    44KB

  • Sample

    240619-xtwnyssbql

  • MD5

    001b58afd4b0657b4a4594cef54b4547

  • SHA1

    a51c8ce7949a6e13099c6ca707b03718ad88257e

  • SHA256

    c76fb0b47d1c61850ddb5b34d3c26a4ba67cd6ec46fa3891d508005096ae7616

  • SHA512

    2bbc3ddf9da64cf3f1517c72c1b15c4ec628f4fa4ce3238774e8dcd20220c073b45c9dc846487c62bb01d2103d9fb085a403558cffa8dae9fe4bb2b502154a94

  • SSDEEP

    768:rBr+ujFqTPbAlfzh5lr6an3sETA8lvm2mfOTwYPIkzoiQ:FykUAlrjlr6an9TLlvm2ouQkoiQ

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      001b58afd4b0657b4a4594cef54b4547_JaffaCakes118

    • Size

      44KB

    • MD5

      001b58afd4b0657b4a4594cef54b4547

    • SHA1

      a51c8ce7949a6e13099c6ca707b03718ad88257e

    • SHA256

      c76fb0b47d1c61850ddb5b34d3c26a4ba67cd6ec46fa3891d508005096ae7616

    • SHA512

      2bbc3ddf9da64cf3f1517c72c1b15c4ec628f4fa4ce3238774e8dcd20220c073b45c9dc846487c62bb01d2103d9fb085a403558cffa8dae9fe4bb2b502154a94

    • SSDEEP

      768:rBr+ujFqTPbAlfzh5lr6an3sETA8lvm2mfOTwYPIkzoiQ:FykUAlrjlr6an9TLlvm2ouQkoiQ

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks