Overview

overview

10

Static

static

10

517ffea53e...18.exe

windows7-x64

10

517ffea53e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    517ffea53ea6f975b76efd3244d4c622_JaffaCakes118

  • Size

    55KB

  • Sample

    241017-k6hlmsvcjm

  • MD5

    517ffea53ea6f975b76efd3244d4c622

  • SHA1

    a030a78f58b4896c5a18c387b32bef0ab3fe10ff

  • SHA256

    0b4bba4362f866e82f3bbcacde3d07024e57fff335f0af1d229fcde2d14578ef

  • SHA512

    779adc8ec9dea044b9bb825aa22c3ca0c536be9618c8dc5452bd24f5f5bb5b58b7c5510effc3ffdcfb4b7f160ee8f15f0907e603e38faf7469b0042e5b0dc501

  • SSDEEP

    768:muMAzLqSQ6kwATx94o0IWhWAKphMltZqgpKeC/0euAYfN0bgrzo6:BtLqSQ3w0+rIcKsw4Kx0MzbOo6

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      517ffea53ea6f975b76efd3244d4c622_JaffaCakes118

    • Size

      55KB

    • MD5

      517ffea53ea6f975b76efd3244d4c622

    • SHA1

      a030a78f58b4896c5a18c387b32bef0ab3fe10ff

    • SHA256

      0b4bba4362f866e82f3bbcacde3d07024e57fff335f0af1d229fcde2d14578ef

    • SHA512

      779adc8ec9dea044b9bb825aa22c3ca0c536be9618c8dc5452bd24f5f5bb5b58b7c5510effc3ffdcfb4b7f160ee8f15f0907e603e38faf7469b0042e5b0dc501

    • SSDEEP

      768:muMAzLqSQ6kwATx94o0IWhWAKphMltZqgpKeC/0euAYfN0bgrzo6:BtLqSQ3w0+rIcKsw4Kx0MzbOo6

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks