Extracted

• • Target

    1a389d6219dac3173d1c982c42d8e83f_JaffaCakes118

  • Size

    33KB

  • MD5

    1a389d6219dac3173d1c982c42d8e83f

  • SHA1

    574558116fcb1a70ec9f658a39409675d6c68a93

  • SHA256

    85796f1addd58c8104a4bbb7d3a383ef3bea922bdf1e884d326e907a2c200c22

  • SHA512

    df1b30aeb0aeb801c253ad439f7bdef777f1259936ed844ae6b0c08266d6cab7e434a0adb973655fd349bb2804133cdc26107291434be93924095007e47305ce

  • SSDEEP

    768:0MuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lFDtuuGtu7:dNW71rcYDAWeotvXlrN

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2