Overview

overview

10

Static

static

10

4f747c4a11...18.exe

windows7-x64

10

4f747c4a11...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f747c4a11b99b6af9e66d70aa3a51a9_JaffaCakes118

  • Size

    62KB

  • Sample

    241016-2tgx1s1djl

  • MD5

    4f747c4a11b99b6af9e66d70aa3a51a9

  • SHA1

    229bca6928d1984350d37515d36629b9012497f0

  • SHA256

    c97dcf71bf417004a7b86c78c8f33a4e6577f0e988c5e1642c07e909ec101c0e

  • SHA512

    fc95c5ecfd0a136de1ed1e2e3c87d106387efdc3f368627c0cc8ce98c43ed83567f92c2e4224c9f913023352717a0ade73fa2fc166a3113ca485b6488f3e6bc4

  • SSDEEP

    1536:s+8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3L4:XqMyKdcPeXHW5P4

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      4f747c4a11b99b6af9e66d70aa3a51a9_JaffaCakes118

    • Size

      62KB

    • MD5

      4f747c4a11b99b6af9e66d70aa3a51a9

    • SHA1

      229bca6928d1984350d37515d36629b9012497f0

    • SHA256

      c97dcf71bf417004a7b86c78c8f33a4e6577f0e988c5e1642c07e909ec101c0e

    • SHA512

      fc95c5ecfd0a136de1ed1e2e3c87d106387efdc3f368627c0cc8ce98c43ed83567f92c2e4224c9f913023352717a0ade73fa2fc166a3113ca485b6488f3e6bc4

    • SSDEEP

      1536:s+8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3L4:XqMyKdcPeXHW5P4

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks