Overview

overview

10

Static

static

10

d8d2a51216...18.exe

windows7-x64

10

d8d2a51216...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8d2a51216e4b392b8926c578b2e8b39_JaffaCakes118

  • Size

    44KB

  • Sample

    241209-kvcw1sxmcr

  • MD5

    d8d2a51216e4b392b8926c578b2e8b39

  • SHA1

    40b933e1062fb4935a32a5c2964fe9466836d671

  • SHA256

    d9b0257deef33ce524f95bad25a33e27e48f0e3ae3e4c3604a4f8d308d1f36c4

  • SHA512

    8fc24dbcd8fcd23d174dd7c29ffa3b1d7d88d2867f97d0c12a7b6892fad831856eb1891ab2918eddaef3087bfb3a7f61ed899d9d7d991487424f037cfe614e86

  • SSDEEP

    768:1Br+tjF1TPkAlfztB1lr6anQ9mTwcuvm2DfOTwYPIVzoF:ryRvHlrL1lr6anPTbuvm2buQFoF

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      d8d2a51216e4b392b8926c578b2e8b39_JaffaCakes118

    • Size

      44KB

    • MD5

      d8d2a51216e4b392b8926c578b2e8b39

    • SHA1

      40b933e1062fb4935a32a5c2964fe9466836d671

    • SHA256

      d9b0257deef33ce524f95bad25a33e27e48f0e3ae3e4c3604a4f8d308d1f36c4

    • SHA512

      8fc24dbcd8fcd23d174dd7c29ffa3b1d7d88d2867f97d0c12a7b6892fad831856eb1891ab2918eddaef3087bfb3a7f61ed899d9d7d991487424f037cfe614e86

    • SSDEEP

      768:1Br+tjF1TPkAlfztB1lr6anQ9mTwcuvm2DfOTwYPIVzoF:ryRvHlrL1lr6anPTbuvm2buQFoF

    Score
    10/10
    xtremeratpersistenceratspywarediscovery

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks