Overview

overview

10

Static

static

10

86740c2595...18.exe

windows7-x64

10

86740c2595...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86740c25959f0a1a6cdc4e7d7b066f46_JaffaCakes118

  • Size

    33KB

  • Sample

    241102-t49rsasmgj

  • MD5

    86740c25959f0a1a6cdc4e7d7b066f46

  • SHA1

    b266d146255a13c1e70d51373973bf1d17cae7f0

  • SHA256

    31a66b3bf61bbc8c22e89c38c57c7a61c05935be38edc1e00f75ac8eae03189d

  • SHA512

    6958510d41ad39a03a7cecb317387e0283629ac9521a9868eca1a5b999e56fecb35d3fe2137c393b1b27c3751b9c9d7889a33bef6674bd68fd57e1f1946f8b8b

  • SSDEEP

    768:UMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l2tz7FS9Vhd0tj:9NW71rcYDAWeotvXlcqhS

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      86740c25959f0a1a6cdc4e7d7b066f46_JaffaCakes118

    • Size

      33KB

    • MD5

      86740c25959f0a1a6cdc4e7d7b066f46

    • SHA1

      b266d146255a13c1e70d51373973bf1d17cae7f0

    • SHA256

      31a66b3bf61bbc8c22e89c38c57c7a61c05935be38edc1e00f75ac8eae03189d

    • SHA512

      6958510d41ad39a03a7cecb317387e0283629ac9521a9868eca1a5b999e56fecb35d3fe2137c393b1b27c3751b9c9d7889a33bef6674bd68fd57e1f1946f8b8b

    • SSDEEP

      768:UMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l2tz7FS9Vhd0tj:9NW71rcYDAWeotvXlcqhS

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks