Overview

overview

10

Static

static

10

3ad56f28af...18.exe

windows7-x64

10

3ad56f28af...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ad56f28af3a7dacb5f2114ad4275669_JaffaCakes118

  • Size

    289KB

  • Sample

    241012-s7c2jssenl

  • MD5

    3ad56f28af3a7dacb5f2114ad4275669

  • SHA1

    5f77cc63e764a7cf7af11a9a9fbf8d74eb3e9d35

  • SHA256

    ea3dd9581f93d657b28fa00793c8391a75412442e190bb01ee266516805c6c6c

  • SHA512

    8e81d73c02361a2c97d819af4c827a5d40830a867427661a933bc03845c7f8f53aeb5382afad3bce86d1d120d80dc37695c577812e3b354603aee37d67dcabb0

  • SSDEEP

    6144:+r6cPpODxCdS7eOUQ41zKd1KVonBNN05dB3kRfOMu:MVcCPoBNNIn3kRWX

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      3ad56f28af3a7dacb5f2114ad4275669_JaffaCakes118

    • Size

      289KB

    • MD5

      3ad56f28af3a7dacb5f2114ad4275669

    • SHA1

      5f77cc63e764a7cf7af11a9a9fbf8d74eb3e9d35

    • SHA256

      ea3dd9581f93d657b28fa00793c8391a75412442e190bb01ee266516805c6c6c

    • SHA512

      8e81d73c02361a2c97d819af4c827a5d40830a867427661a933bc03845c7f8f53aeb5382afad3bce86d1d120d80dc37695c577812e3b354603aee37d67dcabb0

    • SSDEEP

      6144:+r6cPpODxCdS7eOUQ41zKd1KVonBNN05dB3kRfOMu:MVcCPoBNNIn3kRWX

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks