General

  • Target

    3845a993082c0bbd314941ec0fdabf8a_JaffaCakes118

  • Size

    69KB

  • Sample

    240711-jna86syfpd

  • MD5

    3845a993082c0bbd314941ec0fdabf8a

  • SHA1

    c3dce4ab9927191a89bca94adffe725289f67497

  • SHA256

    1c32efb9d844549f366af1dd6b14752ee0f4f9dbefac747114e4409db10f34f5

  • SHA512

    527c4515d9d0f2496c30de209224c079d1cdbf300b9ccbd46f54ff7c72215ddcb245727f27477bdfc29151f656b46c9f0fd1c5433499c5d411a216c198b6f6a3

  • SSDEEP

    1536:/sOS9/DDeyL8Q4mLQb9DlvckT7aNxhBs+BTf8o5VYbHO:UOYbDFP4mSrvPT70xhBs+9fvB

Malware Config

Targets

    • Target

      3845a993082c0bbd314941ec0fdabf8a_JaffaCakes118

    • Size

      69KB

    • MD5

      3845a993082c0bbd314941ec0fdabf8a

    • SHA1

      c3dce4ab9927191a89bca94adffe725289f67497

    • SHA256

      1c32efb9d844549f366af1dd6b14752ee0f4f9dbefac747114e4409db10f34f5

    • SHA512

      527c4515d9d0f2496c30de209224c079d1cdbf300b9ccbd46f54ff7c72215ddcb245727f27477bdfc29151f656b46c9f0fd1c5433499c5d411a216c198b6f6a3

    • SSDEEP

      1536:/sOS9/DDeyL8Q4mLQb9DlvckT7aNxhBs+BTf8o5VYbHO:UOYbDFP4mSrvPT70xhBs+9fvB

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks