Overview

overview

10

Static

static

10

574e27dba3...18.exe

windows7-x64

10

574e27dba3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    574e27dba3c13a63f37fdb678c690466_JaffaCakes118

  • Size

    158KB

  • Sample

    241018-n379nsvgqb

  • MD5

    574e27dba3c13a63f37fdb678c690466

  • SHA1

    36095902b7aa0f0bbe6d098ba33d6bdf30656e13

  • SHA256

    c089e0c6d2ec3da7fd88a386ac32631b9ac9545948c096e004abc62341f666de

  • SHA512

    c0f8ae6acc59088901f768a61dd8de4d9c582a379c5096cfbc7a3036583a4f8ce5cf9e05dc5d594c9157b5fff320fb19b4ebe8fddf977079b39a4b974c9f09fa

  • SSDEEP

    1536:ksq+Q/4rObAdXWpfKy/Vz97qjh3rmKPNIoT:Ra4rjktzojZqMNIoT

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      574e27dba3c13a63f37fdb678c690466_JaffaCakes118

    • Size

      158KB

    • MD5

      574e27dba3c13a63f37fdb678c690466

    • SHA1

      36095902b7aa0f0bbe6d098ba33d6bdf30656e13

    • SHA256

      c089e0c6d2ec3da7fd88a386ac32631b9ac9545948c096e004abc62341f666de

    • SHA512

      c0f8ae6acc59088901f768a61dd8de4d9c582a379c5096cfbc7a3036583a4f8ce5cf9e05dc5d594c9157b5fff320fb19b4ebe8fddf977079b39a4b974c9f09fa

    • SSDEEP

      1536:ksq+Q/4rObAdXWpfKy/Vz97qjh3rmKPNIoT:Ra4rjktzojZqMNIoT

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks