Extracted

• • Target

    f99cce032567edf932664cb0f2dc9c65_JaffaCakes118

  • Size

    44KB

  • MD5

    f99cce032567edf932664cb0f2dc9c65

  • SHA1

    9fe3c4958708c0643eda793c48214f8ccdf78730

  • SHA256

    353365ecf8623960b344632bd9d8ec3c955612a6f8a7dff386c73e05926f687b

  • SHA512

    ecf90484d9d8da6a25aaa247c26fbbc2ab27d6fa53831410530de047c2b6bd3eedfb51544cbce3affc336e2d7294f8bd65936c13dc4cf61a1b052f2584526d6c

  • SSDEEP

    768:vMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lkD4qDZm0E15u:ENW71rcYDAWeotvXl644Zm085u

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2