Overview

overview

10

Static

static

10

JaffaCakes...bd.exe

windows7-x64

10

JaffaCakes...bd.exe

windows10-2004-x64

10

JaffaCakes...bd.exe

windows10-ltsc 2021-x64

10

JaffaCakes...bd.exe

windows11-21h2-x64

10

Resubmissions

02-01-2025 07:37

250102-jfw6ns1mbs 10

02-01-2025 07:37

250102-jft2batmeq 10

02-01-2025 07:33

250102-jd2y5s1lb1 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_638c04eae5e282c98536588853ef56bd

  • Size

    31KB

  • Sample

    250102-jft2batmeq

  • MD5

    638c04eae5e282c98536588853ef56bd

  • SHA1

    a8d028b997da033867f743733fa1a4fc9013eb84

  • SHA256

    ae313d0e47a0b2b9add0b80b5b81f9646deebf56e2d23688bca77895f43f3ae4

  • SHA512

    a2c587ce5a4930858213783b3fb5a1c49f269f639bb9194bcadcf6d32e49176cb8167d37e7eae4c059cf541c09b59b32e62357bd9c98bad83e4d7e11ead14409

  • SSDEEP

    768:TSuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jnGsZl:+NW70x6ALBwG/

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      JaffaCakes118_638c04eae5e282c98536588853ef56bd

    • Size

      31KB

    • MD5

      638c04eae5e282c98536588853ef56bd

    • SHA1

      a8d028b997da033867f743733fa1a4fc9013eb84

    • SHA256

      ae313d0e47a0b2b9add0b80b5b81f9646deebf56e2d23688bca77895f43f3ae4

    • SHA512

      a2c587ce5a4930858213783b3fb5a1c49f269f639bb9194bcadcf6d32e49176cb8167d37e7eae4c059cf541c09b59b32e62357bd9c98bad83e4d7e11ead14409

    • SSDEEP

      768:TSuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jnGsZl:+NW70x6ALBwG/

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks