Extracted

• • Target

    c0f67c645ea95e55d33d3bab165e1e20_JaffaCakes118

  • Size

    301KB

  • MD5

    c0f67c645ea95e55d33d3bab165e1e20

  • SHA1

    f65df8089e127e5e6e448fcd02c844ff3f3dc3b6

  • SHA256

    c499b8e4ad898644b8be051e9c8191448c1db785e086b39a96fad64eeec8060f

  • SHA512

    382be4e07faeb19cceba96446f22258ac8a99b0ead53e29e14619939919da5553f7dfbb944efcd3f7ca7ca2efa7c8db50e0bc12bdc94b1713be112b538c18553

  • SSDEEP

    768:P8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiiEzoUngXP:Xsq+QV4rObAdXWpf/y+IoatMaox

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2