Extracted

• • Target

    c8bf9657352e5e51a956d77f9b986ab5_JaffaCakes118

  • Size

    38KB

  • MD5

    c8bf9657352e5e51a956d77f9b986ab5

  • SHA1

    ac11229dcd3dbdebb22e5a4ff78c494d46eb56c9

  • SHA256

    e3ace160dc056dba8dd375bd7c4e60a3c0ef47084c83fce77fd4c6b06f0b010a

  • SHA512

    538ca012d1ba731e8fa3e0a8f358a004334c924a0e9c1d3fcce625c5464b593d9d2a0bbe3aed62326df52772586e3a96160170ce466445474245d7689c4e8768

  • SSDEEP

    768:xMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgVzD4F:aNW71rcYDAWeoDrsgvu

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2