Extracted

• • Target

    17c30820ae17f5c7b157aafefcbcd72c_JaffaCakes118

  • Size

    62KB

  • MD5

    17c30820ae17f5c7b157aafefcbcd72c

  • SHA1

    05801fe45e954f9029363e96eea0baba703c4456

  • SHA256

    a1455145e56d06e46a85d0a74462417282567b3b7c268c595c3664f0ffec85d3

  • SHA512

    ca936ceca5b96aa684d735c6b2b09267ee3049a6cdfe2319316613bd611ef83f7f7f8ddd8bbaca5131b571404234dbfaa16ce2bfc99991bfa2633b4e269269f7

  • SSDEEP

    1536:YNW71rcYDAWeotvXl47a+hfsudTtYNqkSZZZ3gsOib:YNW7dEvotvX6aIdKHUFb

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2