Extracted

• • Target

    1d3e56109ae34fd7d674b8e4ef2f1f5a_JaffaCakes118

  • Size

    33KB

  • MD5

    1d3e56109ae34fd7d674b8e4ef2f1f5a

  • SHA1

    09aac7fe2d064502f7ea0b99e27a86e3c3f8d406

  • SHA256

    259b8a3d65f2fa46f6a5d28882bb9f72b6f2ec8ef82829398e8ec6a2c90d6fbe

  • SHA512

    87ee72ac04eb1d79fa072e7b787ba760081d4dce6ac4e10ea70311238e62b7341efbe3b98196278eeda3b1ab8e79faf733d56708b7d3dd51451f658c60ca7a28

  • SSDEEP

    768:JMuijtHf5g7/IIG3rGcYDiSvFIWuePhDGEsgaBQX9vgsgn8dP:CNW71bcYDbWeZDrsLq9bg8d

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2