Overview

overview

10

Static

static

10

fab67e18d7...18.exe

windows7-x64

10

fab67e18d7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fab67e18d747e947000cad0c7ab98acb_JaffaCakes118

  • Size

    40KB

  • Sample

    241218-js6wms1qdn

  • MD5

    fab67e18d747e947000cad0c7ab98acb

  • SHA1

    f710d606e563df78d7fee811ff98cbb5a4bd5e69

  • SHA256

    a0c987560a4521eecc3a21ebe4c777c28827ae883998d2423b62d87dd5bec85a

  • SHA512

    9adfab09ec79ad7bd96b11a2497bb3682419cfad6739a21ea369e3983c85ca63da1f3bc8894451796f6dee7210709effa67af8e5a11576650fcbb969f9b87ef9

  • SSDEEP

    768:CEohghdN12Ozhiow2Gkm6jc3/pBzNBwIldCzoc:Cv+zMOlw2GkmF3/Blduoc

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      fab67e18d747e947000cad0c7ab98acb_JaffaCakes118

    • Size

      40KB

    • MD5

      fab67e18d747e947000cad0c7ab98acb

    • SHA1

      f710d606e563df78d7fee811ff98cbb5a4bd5e69

    • SHA256

      a0c987560a4521eecc3a21ebe4c777c28827ae883998d2423b62d87dd5bec85a

    • SHA512

      9adfab09ec79ad7bd96b11a2497bb3682419cfad6739a21ea369e3983c85ca63da1f3bc8894451796f6dee7210709effa67af8e5a11576650fcbb969f9b87ef9

    • SSDEEP

      768:CEohghdN12Ozhiow2Gkm6jc3/pBzNBwIldCzoc:Cv+zMOlw2GkmF3/Blduoc

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks