Overview

overview

10

Static

static

10

4171709e54...18.exe

windows7-x64

10

4171709e54...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4171709e54ef43b0458ac94b16072389_JaffaCakes118

  • Size

    65KB

  • Sample

    241013-xaax5s1gmh

  • MD5

    4171709e54ef43b0458ac94b16072389

  • SHA1

    ee790f310b6ca66fefb21a4b6db05a47ecd6694f

  • SHA256

    7db5b68d8f41e7bc650ab159249c6792c1b2aa369a4a97f7902829f6e49b07d0

  • SHA512

    cc1c50a08e62d1a8b90a03b8dc956d25cadf30ac9eb5e37dc18b7b393ac00538b22c3c378c28f5d0f2bd457f1f39a708623881950ffe8cb828716f408dc47310

  • SSDEEP

    768:84m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnco/yyR+P2ujf3iJKlA+7Xoy:Wsq+QV4rObAdXWpfJy/LuzNwirNm

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      4171709e54ef43b0458ac94b16072389_JaffaCakes118

    • Size

      65KB

    • MD5

      4171709e54ef43b0458ac94b16072389

    • SHA1

      ee790f310b6ca66fefb21a4b6db05a47ecd6694f

    • SHA256

      7db5b68d8f41e7bc650ab159249c6792c1b2aa369a4a97f7902829f6e49b07d0

    • SHA512

      cc1c50a08e62d1a8b90a03b8dc956d25cadf30ac9eb5e37dc18b7b393ac00538b22c3c378c28f5d0f2bd457f1f39a708623881950ffe8cb828716f408dc47310

    • SSDEEP

      768:84m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnco/yyR+P2ujf3iJKlA+7Xoy:Wsq+QV4rObAdXWpfJy/LuzNwirNm

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks