Extracted

• • Target

    a6029981451a406765cc5da550197f8f_JaffaCakes118

  • Size

    74KB

  • MD5

    a6029981451a406765cc5da550197f8f

  • SHA1

    98c881a21ba0d6984440475efa0d763de4f3d4a1

  • SHA256

    ed0af6ce724583b77892698f338a7f7a9a50aa67221aa2385909b8a8991ce603

  • SHA512

    c94747c5a36d5e9b6429f7b7653403c1db9760f050b9371ae25e0dc6bfac705423383eb169b970439a0792e3763a94036d6dc079f2586d52cbacab8c60741f43

  • SSDEEP

    1536:aNW71rcYDAWeotvXlyL7ogtqLWUweYZFFVVlZlIxV3nyaU1xtgJ:aNW7dEvotvXoL7ntR7eYZFXbIxyjxtgJ

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2