Overview

overview

10

Static

static

10

84bb4a123b...18.exe

windows7-x64

10

84bb4a123b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84bb4a123b2287e17f5df7cee74e5a32_JaffaCakes118

  • Size

    65KB

  • Sample

    241102-cnllkszjdm

  • MD5

    84bb4a123b2287e17f5df7cee74e5a32

  • SHA1

    4f0ca23004bda1a64cb35bf09c0cc23df292e53f

  • SHA256

    adff77f047346fc335d42f363df2804ecf323e9fa38d1a77ddb8d9757731cc95

  • SHA512

    4bdde87259b04cc8e9fef587a9abb08c147a82097451e32dfa582910558c5aed291304e63e24eefadc92b5ad15e4c2a1d32d5cabe73f3095ae04e994d0fd3664

  • SSDEEP

    768:Aem1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujf8iZKPA+7Xon:4sq+QV4rObAdXWpf/yE7ozNwiC4X

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      84bb4a123b2287e17f5df7cee74e5a32_JaffaCakes118

    • Size

      65KB

    • MD5

      84bb4a123b2287e17f5df7cee74e5a32

    • SHA1

      4f0ca23004bda1a64cb35bf09c0cc23df292e53f

    • SHA256

      adff77f047346fc335d42f363df2804ecf323e9fa38d1a77ddb8d9757731cc95

    • SHA512

      4bdde87259b04cc8e9fef587a9abb08c147a82097451e32dfa582910558c5aed291304e63e24eefadc92b5ad15e4c2a1d32d5cabe73f3095ae04e994d0fd3664

    • SSDEEP

      768:Aem1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujf8iZKPA+7Xon:4sq+QV4rObAdXWpf/yE7ozNwiC4X

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks