Overview

overview

10

Static

static

10

2d74a7ccf0...18.exe

windows7-x64

10

2d74a7ccf0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d74a7ccf04088e33d0c99c3f80597d5_JaffaCakes118

  • Size

    65KB

  • Sample

    241009-jl12tazcjc

  • MD5

    2d74a7ccf04088e33d0c99c3f80597d5

  • SHA1

    b4051954a44cf409f778a818347c8d8f20dc2a9c

  • SHA256

    62918ba74587703b42e6e86b6ffdf540d1893e09fbe187b49194b97644601135

  • SHA512

    f925c90c804cb220a79baaad332d97ef90ab972b14407e7a543ddc88265df071db131d2da3e42dd4257a1f433f014ec0d4c37a12bebd712ae5b9fe8432f47325

  • SSDEEP

    768:Aem1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujf9iZKPA+7Xon:4sq+QV4rObAdXWpf/yl7ozNwiC4X

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      2d74a7ccf04088e33d0c99c3f80597d5_JaffaCakes118

    • Size

      65KB

    • MD5

      2d74a7ccf04088e33d0c99c3f80597d5

    • SHA1

      b4051954a44cf409f778a818347c8d8f20dc2a9c

    • SHA256

      62918ba74587703b42e6e86b6ffdf540d1893e09fbe187b49194b97644601135

    • SHA512

      f925c90c804cb220a79baaad332d97ef90ab972b14407e7a543ddc88265df071db131d2da3e42dd4257a1f433f014ec0d4c37a12bebd712ae5b9fe8432f47325

    • SSDEEP

      768:Aem1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujf9iZKPA+7Xon:4sq+QV4rObAdXWpf/yl7ozNwiC4X

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks