Overview

overview

10

Static

static

3

4ab990a3c7...18.exe

windows7-x64

10

4ab990a3c7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ab990a3c782804d2a11dd16d0dc07b1_JaffaCakes118

  • Size

    416KB

  • Sample

    240715-v9k62svbkd

  • MD5

    4ab990a3c782804d2a11dd16d0dc07b1

  • SHA1

    3f94b168538911a21a2f57ec4643274738afdcbb

  • SHA256

    5991c53c781c8c8ec1330ee044ec538c9c61c4d0d5a08851b7c0c8e9c6916d49

  • SHA512

    f702fa74174bba72d10dff6cac0c0e5a3f9117ac31e82c75a3d89ac1ffbab540666218375c6b16993967b5800c9d5f60a9cf62dd6d37161605eb212782803fe5

  • SSDEEP

    6144:VXD6hp7KGP4CvzOWfojBmXjfT4rp5gUH3Q6UD83JLbcnznclG49vE/Mg:MJP4CvctmXjb4SUHr36zncx

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      4ab990a3c782804d2a11dd16d0dc07b1_JaffaCakes118

    • Size

      416KB

    • MD5

      4ab990a3c782804d2a11dd16d0dc07b1

    • SHA1

      3f94b168538911a21a2f57ec4643274738afdcbb

    • SHA256

      5991c53c781c8c8ec1330ee044ec538c9c61c4d0d5a08851b7c0c8e9c6916d49

    • SHA512

      f702fa74174bba72d10dff6cac0c0e5a3f9117ac31e82c75a3d89ac1ffbab540666218375c6b16993967b5800c9d5f60a9cf62dd6d37161605eb212782803fe5

    • SSDEEP

      6144:VXD6hp7KGP4CvzOWfojBmXjfT4rp5gUH3Q6UD83JLbcnznclG49vE/Mg:MJP4CvctmXjb4SUHr36zncx

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks