Overview

overview

10

Static

static

10

d509154a46...18.exe

windows7-x64

10

d509154a46...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d509154a4656ee6f0e180b922f33b8a5_JaffaCakes118

  • Size

    81KB

  • Sample

    241208-d2r6yszqaz

  • MD5

    d509154a4656ee6f0e180b922f33b8a5

  • SHA1

    4d3b368e85e35a1b6a679091b7b997dbf95bb313

  • SHA256

    78913bfe57d7939420d35c0d34c98334938f25fddad8e336e364d76bad5c37cb

  • SHA512

    0be402af40a3a4206815e9313c2ba24236411a573d8d2fef5d70c314f5e3b6f0727be89b64483beaf14b9b949c571db6573f4ef19eca39155aea2bf5ea2e431d

  • SSDEEP

    1536:3T8qDqQ8K9MK3tGjbNwPZ6OIeXHWTl5NX3RfEfE:DqMyKdcleXHW51cs

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      d509154a4656ee6f0e180b922f33b8a5_JaffaCakes118

    • Size

      81KB

    • MD5

      d509154a4656ee6f0e180b922f33b8a5

    • SHA1

      4d3b368e85e35a1b6a679091b7b997dbf95bb313

    • SHA256

      78913bfe57d7939420d35c0d34c98334938f25fddad8e336e364d76bad5c37cb

    • SHA512

      0be402af40a3a4206815e9313c2ba24236411a573d8d2fef5d70c314f5e3b6f0727be89b64483beaf14b9b949c571db6573f4ef19eca39155aea2bf5ea2e431d

    • SSDEEP

      1536:3T8qDqQ8K9MK3tGjbNwPZ6OIeXHWTl5NX3RfEfE:DqMyKdcleXHW51cs

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks