Overview

overview

10

Static

static

3

46542d866b...18.exe

windows7-x64

10

46542d866b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    46542d866ba792af067c45cca89e09ee_JaffaCakes118
  • Size 155KB
  • Sample240714-sd4bmsvgkk
  • SHA256 70fb8c21f68b8b73a670367d86078004132ad68ecf3d01b12833dd7b3c8d8728
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xtremeratbootkitpersistenceratspyware

Malware Config

Targets

    • Target
      46542d866ba792af067c45cca89e09ee_JaffaCakes118
    • Size 155KB
    • SHA256 70fb8c21f68b8b73a670367d86078004132ad68ecf3d01b12833dd7b3c8d8728
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xtremeratbootkitpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks