Extracted

• • Target

    bb95ebbffcd14744daac516accee6d7a_JaffaCakes118

  • Size

    33KB

  • MD5

    bb95ebbffcd14744daac516accee6d7a

  • SHA1

    c3d3aaee56941cea598e3b4a0780a3da3bf4fc0a

  • SHA256

    5969558cc924df659e3df84ebab35cf19ff3609276653d51253ee1b16bd310ec

  • SHA512

    7e6b706b6205e5ce5cb24b4342537f7fbcb40449d1438b39ebb533868cd26fa235f854bda2c07d1983e6396f761ac24835a3446c0981f9a7da3f25a60b02fbeb

  • SSDEEP

    768:SMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66llQoicTa:PNW71rcYDAWeotvXllmc

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2