Extracted

• • Target

    f96a16e31d7c99d5b09d01401b826c0b_JaffaCakes118

  • Size

    160KB

  • MD5

    f96a16e31d7c99d5b09d01401b826c0b

  • SHA1

    989015b9b0b6797f48c8dc9c84bd641ed366566e

  • SHA256

    15e2f60d099421543c908ae38d777d0ccfa8a009790e72428e31dccc6c75b0ee

  • SHA512

    87c60244893bfac8d5c6dd0d474bd7776012b1940fafd03951d4c259e42ebd3d065bf5646a43dc3ac3863cd5bbc8737f483afde762b023509ae8a3e1fdcf44ec

  • SSDEEP

    3072:pmG/oXBcT7JkjkstZ1uy/Z17mko9CRNfETVL9WA:pAxcx8J5uybal9C3Y3WA

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat
  behavioral1behavioral2