Overview

overview

10

Static

static

10

9cbf7d6ce8...18.exe

windows7-x64

10

9cbf7d6ce8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9cbf7d6ce89ac955fb7ef854ca20fb0d_JaffaCakes118

  • Size

    230KB

  • Sample

    241125-ve41nssqhm

  • MD5

    9cbf7d6ce89ac955fb7ef854ca20fb0d

  • SHA1

    16e451b139f79fc0fc95e2989184cbbc6544a8d4

  • SHA256

    a0ee4938177c3f303130b68bcaca9a7d6b865c93b4fe794d0e0e96d13ebff3ce

  • SHA512

    a2b907a9e058d747444c25b67bade177a667d37a2ee2dec28bd6865379ecb876a94f5cde266386fc28ae2ca076dd945bbfc6071c0dcb6575c8dc23a3047670a7

  • SSDEEP

    6144:RBLmqajezILl7bnYsIH95oScXrvLqDDvMo:1iezAfYvcXrmXM

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      9cbf7d6ce89ac955fb7ef854ca20fb0d_JaffaCakes118

    • Size

      230KB

    • MD5

      9cbf7d6ce89ac955fb7ef854ca20fb0d

    • SHA1

      16e451b139f79fc0fc95e2989184cbbc6544a8d4

    • SHA256

      a0ee4938177c3f303130b68bcaca9a7d6b865c93b4fe794d0e0e96d13ebff3ce

    • SHA512

      a2b907a9e058d747444c25b67bade177a667d37a2ee2dec28bd6865379ecb876a94f5cde266386fc28ae2ca076dd945bbfc6071c0dcb6575c8dc23a3047670a7

    • SSDEEP

      6144:RBLmqajezILl7bnYsIH95oScXrvLqDDvMo:1iezAfYvcXrmXM

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks