Extracted

• • Target

    JaffaCakes118_629d16d7d484e4c1340cecd4fbc2cc73

  • Size

    33KB

  • MD5

    629d16d7d484e4c1340cecd4fbc2cc73

  • SHA1

    0998fc60873868e75ba2100560df65e3dd50b1fb

  • SHA256

    198914ba907c48cbe695a7925c12b4af9b9ef125dd67c0b3ab2a0e1ff21c4265

  • SHA512

    8edcdf87335ef07efce96f0bc75cb5bb1fb1caf2e48c46379c78a4790f875880677c9ed94a85bf7623290420810a6c0d00f641a801852bdd7ee8f07684b03154

  • SSDEEP

    768:nMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lrDo9ODQDm:MNW71rcYDAWeotvXlvo9

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2