Overview

overview

10

Static

static

10

e9c5cabecc...18.exe

windows7-x64

10

e9c5cabecc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9c5cabecc2932ce9caee730afd6bdb5_JaffaCakes118

  • Size

    33KB

  • Sample

    241213-ehvcmsxphs

  • MD5

    e9c5cabecc2932ce9caee730afd6bdb5

  • SHA1

    153485e351c4450f99ed64eba96ce8ab56bc36d4

  • SHA256

    7e4e0fe84feae49762d88fc93bea282ab86721e121b497b23e6970364986a2df

  • SHA512

    93f4b462acbba3f6300347a42a2dfda3d1fa1f0670f64c4d0aa7cc7a91627946f549aac00606206891a9d5953a71b794da47ed238bff0d1afbab5928993c1956

  • SSDEEP

    768:NMuijtHf5g7/IIG3bGuYDBSvFIWuePQBv66l5tz7KZdtJ7Or:mNW71ruYDAWeoBvXl/YdW

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      e9c5cabecc2932ce9caee730afd6bdb5_JaffaCakes118

    • Size

      33KB

    • MD5

      e9c5cabecc2932ce9caee730afd6bdb5

    • SHA1

      153485e351c4450f99ed64eba96ce8ab56bc36d4

    • SHA256

      7e4e0fe84feae49762d88fc93bea282ab86721e121b497b23e6970364986a2df

    • SHA512

      93f4b462acbba3f6300347a42a2dfda3d1fa1f0670f64c4d0aa7cc7a91627946f549aac00606206891a9d5953a71b794da47ed238bff0d1afbab5928993c1956

    • SSDEEP

      768:NMuijtHf5g7/IIG3bGuYDBSvFIWuePQBv66l5tz7KZdtJ7Or:mNW71ruYDAWeoBvXl/YdW

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks