Overview

overview

10

Static

static

10

daac44e81c...18.exe

windows7-x64

10

daac44e81c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    daac44e81c354330f3afc4f378944477_JaffaCakes118

  • Size

    82KB

  • Sample

    241209-vqjtwavlfw

  • MD5

    daac44e81c354330f3afc4f378944477

  • SHA1

    31eed75004054c42ca3fea4ca6105ba597a76dd2

  • SHA256

    b3a10160f588e942dbef93afb940c375ad6150ca2bd51f37a656a5cf8f9564db

  • SHA512

    03db41c3f08862cc6f3201c4aa2a57fc2e7499a10465f9bbf0cd43638c2aec9e975486c11b5746765535f4fe1b53b8ad788b831f7f97ac172f6dbaf87ffd0fae

  • SSDEEP

    1536:Isq+QU4rObAdXWpf/yp7ozNwi3YIYroBP:Nt4rj/ZodUoB

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      daac44e81c354330f3afc4f378944477_JaffaCakes118

    • Size

      82KB

    • MD5

      daac44e81c354330f3afc4f378944477

    • SHA1

      31eed75004054c42ca3fea4ca6105ba597a76dd2

    • SHA256

      b3a10160f588e942dbef93afb940c375ad6150ca2bd51f37a656a5cf8f9564db

    • SHA512

      03db41c3f08862cc6f3201c4aa2a57fc2e7499a10465f9bbf0cd43638c2aec9e975486c11b5746765535f4fe1b53b8ad788b831f7f97ac172f6dbaf87ffd0fae

    • SSDEEP

      1536:Isq+QU4rObAdXWpf/yp7ozNwi3YIYroBP:Nt4rj/ZodUoB

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks