Extracted

• • Target

    e10aeb550261bed83afb11d4b5b858b8_JaffaCakes118

  • Size

    290KB

  • MD5

    e10aeb550261bed83afb11d4b5b858b8

  • SHA1

    2e7c67c3317f4bce58b77b568fc28c032297cc52

  • SHA256

    e347228c165e1353c48fd79bb0e345c8ab014bed705f72a5902787e3eda057ff

  • SHA512

    bdd95dae711f474b0f31e754ca9c3b1ad88cd2e089096fd1688118c2375f3d3f0bc1aa31cb956a5e2bcb4a8de8dc593a5668d613054f8ef62bb6d445a0d33929

  • SSDEEP

    1536:iT8qDqQ8K9MK3tGjbNwPZ6oIeXHW6YOp4GOx:IqMyKdcPeXHW6YOROx

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2