Overview

overview

10

Static

static

10

56fee5e91c...18.exe

windows7-x64

10

56fee5e91c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56fee5e91cca1f2afe4f8f120449e585_JaffaCakes118

  • Size

    57KB

  • Sample

    241018-mswx8avgjl

  • MD5

    56fee5e91cca1f2afe4f8f120449e585

  • SHA1

    45464d188df54a8cf8b69adc44821738bb60cbbd

  • SHA256

    69423f03f3787c0375adbb2887be60d8359f6f1f9964b855de859f5099f8959f

  • SHA512

    19027b52daf0789e9cdf1de450c9e2c0cb186d12280cc8626248c76f0fd1caae45e2d1e33392838d23387e23c020b915677db1596794403b0d1fb42c44196c3d

  • SSDEEP

    1536:kT8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3:KqMyKdcPeXHW5

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      56fee5e91cca1f2afe4f8f120449e585_JaffaCakes118

    • Size

      57KB

    • MD5

      56fee5e91cca1f2afe4f8f120449e585

    • SHA1

      45464d188df54a8cf8b69adc44821738bb60cbbd

    • SHA256

      69423f03f3787c0375adbb2887be60d8359f6f1f9964b855de859f5099f8959f

    • SHA512

      19027b52daf0789e9cdf1de450c9e2c0cb186d12280cc8626248c76f0fd1caae45e2d1e33392838d23387e23c020b915677db1596794403b0d1fb42c44196c3d

    • SSDEEP

      1536:kT8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3:KqMyKdcPeXHW5

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks