Overview

overview

10

Static

static

3

ced7d33ac6...18.exe

windows7-x64

10

ced7d33ac6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ced7d33ac65569aa7f21c05917b96d95_JaffaCakes118

  • Size

    153KB

  • Sample

    241206-y4xvfavrds

  • MD5

    ced7d33ac65569aa7f21c05917b96d95

  • SHA1

    5cf22789898c1f4d1e39eeff8904017d442a7108

  • SHA256

    8e09b8ae4d931bae398494561c93316748ee26f564a7b0b3d70aa8ec6976d0ea

  • SHA512

    4d4060dec1401879b89183a2742370314cb03e10dbdbd144feeee80437a2bf38deee52fe68eb08aee02724cb5739fda16fa2f638ece400992920cf0132e9f200

  • SSDEEP

    3072:zXyPHEFJoFYI21jRYb/yek9yf90lCh67xRuKH0GNo1l2p:jycJoFf2jGY9aSf7xRJYu

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      ced7d33ac65569aa7f21c05917b96d95_JaffaCakes118

    • Size

      153KB

    • MD5

      ced7d33ac65569aa7f21c05917b96d95

    • SHA1

      5cf22789898c1f4d1e39eeff8904017d442a7108

    • SHA256

      8e09b8ae4d931bae398494561c93316748ee26f564a7b0b3d70aa8ec6976d0ea

    • SHA512

      4d4060dec1401879b89183a2742370314cb03e10dbdbd144feeee80437a2bf38deee52fe68eb08aee02724cb5739fda16fa2f638ece400992920cf0132e9f200

    • SSDEEP

      3072:zXyPHEFJoFYI21jRYb/yek9yf90lCh67xRuKH0GNo1l2p:jycJoFf2jGY9aSf7xRJYu

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks