General

  • Target

    6239060313c9a9d8a6b3b8097907f3f1_JaffaCakes118

  • Size

    33KB

  • Sample

    240722-hwdtlathmj

  • MD5

    6239060313c9a9d8a6b3b8097907f3f1

  • SHA1

    7029af8c9c10e7391103f0f7bd46ecef74d71aaa

  • SHA256

    ee2427f1716baa622b20d1eaf37f10f4e4ba65026ab6fdb4fb4afa2b5a382afa

  • SHA512

    6e741de430c1f74557caa85e23a065fb73b5c066156fe49f5a7e7211f890d62840baae105d28586a85560f65b812da24b63fe4ab322663c54480c2110b57c4eb

  • SSDEEP

    768:VMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lotzu/ryCFaj:eNW71rcYDAWeotvXluGB2

Malware Config

Targets

    • Target

      6239060313c9a9d8a6b3b8097907f3f1_JaffaCakes118

    • Size

      33KB

    • MD5

      6239060313c9a9d8a6b3b8097907f3f1

    • SHA1

      7029af8c9c10e7391103f0f7bd46ecef74d71aaa

    • SHA256

      ee2427f1716baa622b20d1eaf37f10f4e4ba65026ab6fdb4fb4afa2b5a382afa

    • SHA512

      6e741de430c1f74557caa85e23a065fb73b5c066156fe49f5a7e7211f890d62840baae105d28586a85560f65b812da24b63fe4ab322663c54480c2110b57c4eb

    • SSDEEP

      768:VMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lotzu/ryCFaj:eNW71rcYDAWeotvXluGB2

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks