Extracted

• • Target

    62fe30b338a10a2f8da134b41541a9ef_JaffaCakes118

  • Size

    33KB

  • MD5

    62fe30b338a10a2f8da134b41541a9ef

  • SHA1

    7f9593701518885269d2362f145aa276e1b2c4f8

  • SHA256

    1e50f28e73d319419a924bb9e72dfa6fad646e4fef125ca6a3a2ca26420d3f42

  • SHA512

    19d0fa7b788028fd25c4954995af07930ce83be9cbffe815d9405cd1bf5cceebfb4bf3af03bde1df97299b7ace0da57a17574fc40f796ce091cae92a108f2915

  • SSDEEP

    768:nMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l+tsZ1fyD:MNW71rcYDAWeotvXlEil

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2