Overview

overview

10

Static

static

3

29e4b6041c...18.exe

windows7-x64

10

29e4b6041c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29e4b6041c4a5a7ef436601d635fd0d9_JaffaCakes118

  • Size

    121KB

  • Sample

    241009-dv16aazdjj

  • MD5

    29e4b6041c4a5a7ef436601d635fd0d9

  • SHA1

    1c508737327f834ba3ba5f6cc57f064573cd6e3e

  • SHA256

    6e7fd9219eca0a5e48ef915b75dd0a66da1f35344a62cd471c77e6059aeb41cb

  • SHA512

    f1248f3bf143452a4b2170b80de488bd9f7e12b6e1d04336a5694af7044e6dc84aaafd844b312f3a0e057da42384d4e694708b2021e60a64267f2b7ceeb77d75

  • SSDEEP

    3072:DNLNW7dEvosDy1TuDNDwtMa1I2EBHVsujEQX0oSV/iYCDlE2r7Rk:DNLNW7mvo1KDNDSMaitwQX4c22fRk

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      29e4b6041c4a5a7ef436601d635fd0d9_JaffaCakes118

    • Size

      121KB

    • MD5

      29e4b6041c4a5a7ef436601d635fd0d9

    • SHA1

      1c508737327f834ba3ba5f6cc57f064573cd6e3e

    • SHA256

      6e7fd9219eca0a5e48ef915b75dd0a66da1f35344a62cd471c77e6059aeb41cb

    • SHA512

      f1248f3bf143452a4b2170b80de488bd9f7e12b6e1d04336a5694af7044e6dc84aaafd844b312f3a0e057da42384d4e694708b2021e60a64267f2b7ceeb77d75

    • SSDEEP

      3072:DNLNW7dEvosDy1TuDNDwtMa1I2EBHVsujEQX0oSV/iYCDlE2r7Rk:DNLNW7mvo1KDNDSMaitwQX4c22fRk

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks