Extracted

• • Target

    JaffaCakes118_6c32dc814220163427d9b8f18d4d7490

  • Size

    822KB

  • MD5

    6c32dc814220163427d9b8f18d4d7490

  • SHA1

    5ab3ecfbad3d795c0c33c6745c85902759cbbb70

  • SHA256

    0297e08c1b57115dfaa5a88450484e0c9cbce36d0170d0e973e9a86e2fefde8b

  • SHA512

    bc25c97b003501780b3b23708a557f9d38c5cf359fdfe271aaf66cabc5503ea40cfd4b472e6bd60048237b0e49958e477e54562e5eb9fb58f700812292595051

  • SSDEEP

    12288:U69zDWz/xwNqdlbrIX3JALF1QbOagrEGgtNryyCJuDT/PNa0AYQ/Hyw2Eq:U2DW/xbHX2YIbCQsu3/PNL7Q/HyVEq

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Executes dropped EXE

  behavioral1behavioral2