General

  • Target

    37ddb36446fb8849d55d027f3401e4a6_JaffaCakes118

  • Size

    83KB

  • Sample

    240711-f5dh3stdpd

  • MD5

    37ddb36446fb8849d55d027f3401e4a6

  • SHA1

    32f98d847bb326fd5fc195ac0be4178766a5776b

  • SHA256

    58cd995857b0e14ff86011fdc2b371d4eb9fd5bca73ad0be93cd0bf19a6dda4a

  • SHA512

    7f0310bae0bb2023815e37962c9de6b393855b0a86cfdd2d55f41275634d78995e02b2c15aa551abf2d946a68f78b29afcbaa4799e236ea826e08a415c1ee78d

  • SSDEEP

    1536:QalTAJKK6Ko/qKiwkGSxJR55TJlK8UUd0IOArNwNo82EJ:7SKKNo/qKiwkxn53A8U4fOAEo

Malware Config

Targets

    • Target

      37ddb36446fb8849d55d027f3401e4a6_JaffaCakes118

    • Size

      83KB

    • MD5

      37ddb36446fb8849d55d027f3401e4a6

    • SHA1

      32f98d847bb326fd5fc195ac0be4178766a5776b

    • SHA256

      58cd995857b0e14ff86011fdc2b371d4eb9fd5bca73ad0be93cd0bf19a6dda4a

    • SHA512

      7f0310bae0bb2023815e37962c9de6b393855b0a86cfdd2d55f41275634d78995e02b2c15aa551abf2d946a68f78b29afcbaa4799e236ea826e08a415c1ee78d

    • SSDEEP

      1536:QalTAJKK6Ko/qKiwkGSxJR55TJlK8UUd0IOArNwNo82EJ:7SKKNo/qKiwkxn53A8U4fOAEo

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks