Overview

overview

10

Static

static

3

0b310ebf58...18.exe

windows7-x64

10

0b310ebf58...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b310ebf5894e448ea08fb1e9b8fc5c7_JaffaCakes118

  • Size

    120KB

  • Sample

    240624-28ar9azhrk

  • MD5

    0b310ebf5894e448ea08fb1e9b8fc5c7

  • SHA1

    981df795ac609508dae999b5f9c6505a98c32acc

  • SHA256

    d50a00bbefab2d3331d7e04fdd4212936866a49132a0e03def2c45aa515cc976

  • SHA512

    e4c14aed2882f8457c388ca59483c346b51992465a37b7feb8fa447d5d0f608966e41ce443942dd405b43eb7ca674b14b8e2b584e2ea8fa7e04eaef3219576b3

  • SSDEEP

    3072:Ljt8dwRtVgX90KpYzCeiPkX9H0MNrbX0NMFseJnZ92SOEgO:8POFZ4SbgO

Score
10/10
xtremeratpersistenceratspywareupx

Malware Config

Targets

    • Target

      0b310ebf5894e448ea08fb1e9b8fc5c7_JaffaCakes118

    • Size

      120KB

    • MD5

      0b310ebf5894e448ea08fb1e9b8fc5c7

    • SHA1

      981df795ac609508dae999b5f9c6505a98c32acc

    • SHA256

      d50a00bbefab2d3331d7e04fdd4212936866a49132a0e03def2c45aa515cc976

    • SHA512

      e4c14aed2882f8457c388ca59483c346b51992465a37b7feb8fa447d5d0f608966e41ce443942dd405b43eb7ca674b14b8e2b584e2ea8fa7e04eaef3219576b3

    • SSDEEP

      3072:Ljt8dwRtVgX90KpYzCeiPkX9H0MNrbX0NMFseJnZ92SOEgO:8POFZ4SbgO

    Score
    10/10
    xtremeratpersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks