Overview

overview

10

Static

static

10

8a2e7d3726...18.exe

windows7-x64

10

8a2e7d3726...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a2e7d3726b1e294027953d8b7912753_JaffaCakes118

  • Size

    65KB

  • Sample

    241103-hs3zbayale

  • MD5

    8a2e7d3726b1e294027953d8b7912753

  • SHA1

    9d47d8848d76da7a9e0c6e5315e7f5dc97f62ab3

  • SHA256

    a8915c086166e2d1c29423384cfc08bf22256d736d4d2bb77fc4aa419a4a9001

  • SHA512

    9f0b4d2ae9baf7ab2bbe4beffa35fcd7733ad8907804481518bb4a0c18322ce555ee18c0b23cbb0f14239baf8fee4577b27e723f5630a9e76cc650750cfb51e4

  • SSDEEP

    768:+qm1pq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifncz/OyR+P2ujfniZKPA+7XoI:qjq+QV4rObAdXWpfOyf7ozNwiEp

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      8a2e7d3726b1e294027953d8b7912753_JaffaCakes118

    • Size

      65KB

    • MD5

      8a2e7d3726b1e294027953d8b7912753

    • SHA1

      9d47d8848d76da7a9e0c6e5315e7f5dc97f62ab3

    • SHA256

      a8915c086166e2d1c29423384cfc08bf22256d736d4d2bb77fc4aa419a4a9001

    • SHA512

      9f0b4d2ae9baf7ab2bbe4beffa35fcd7733ad8907804481518bb4a0c18322ce555ee18c0b23cbb0f14239baf8fee4577b27e723f5630a9e76cc650750cfb51e4

    • SSDEEP

      768:+qm1pq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifncz/OyR+P2ujfniZKPA+7XoI:qjq+QV4rObAdXWpfOyf7ozNwiEp

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks