Extracted

• • Target

    c5e695d62d4c5df5e073d24900fb7e9a_JaffaCakes118

  • Size

    33KB

  • MD5

    c5e695d62d4c5df5e073d24900fb7e9a

  • SHA1

    487d9c275322156215cd27f382011a8dbfa9c043

  • SHA256

    2185131cb0f4af994331e93a7b87e2980c96233af12295cb4d482a5ddfc0cd10

  • SHA512

    dbd30f00d1cf01d1f12a16257a010a54d60ee76acfcfb8042246a4dde28b45e566200da6a344d8dd7f15e4f600b1533c130be8c88de4deba04fe7f3b155ca1b1

  • SSDEEP

    768:CMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lYtl4qSJH:/NW71rcYDAWeotvXlesJ

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2