Overview

overview

10

Static

static

10

5e978a009d...18.exe

windows7-x64

10

5e978a009d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e978a009d0b82630c9b180bac626eaf_JaffaCakes118

  • Size

    65KB

  • Sample

    241019-zke1ysxhnf

  • MD5

    5e978a009d0b82630c9b180bac626eaf

  • SHA1

    ae6c80342bb4e018fe11f73ae276c81f683d642d

  • SHA256

    a9d23c5a95f7a2c65dcf8865c945d207cc8ed462fca04fed0688fb6316181f39

  • SHA512

    85a161a373901ae2303424faecbb35357214fd4170236a43783cd2e780c2ec2f63e73256d8e70689329f10efe54beb768d7050b996b4e3cb421f233c1c10b30d

  • SSDEEP

    1536:esq+QV4rObAdNoAf5UqiYmWArNwboSEeO:P44rORGACot5

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      5e978a009d0b82630c9b180bac626eaf_JaffaCakes118

    • Size

      65KB

    • MD5

      5e978a009d0b82630c9b180bac626eaf

    • SHA1

      ae6c80342bb4e018fe11f73ae276c81f683d642d

    • SHA256

      a9d23c5a95f7a2c65dcf8865c945d207cc8ed462fca04fed0688fb6316181f39

    • SHA512

      85a161a373901ae2303424faecbb35357214fd4170236a43783cd2e780c2ec2f63e73256d8e70689329f10efe54beb768d7050b996b4e3cb421f233c1c10b30d

    • SSDEEP

      1536:esq+QV4rObAdNoAf5UqiYmWArNwboSEeO:P44rORGACot5

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks