Overview

overview

10

Static

static

3

JaffaCakes...f0.exe

windows7-x64

10

JaffaCakes...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6dfd9e59aae53b98ad50fc8817a3cff0

  • Size

    1.2MB

  • Sample

    250103-t64csawmgl

  • MD5

    6dfd9e59aae53b98ad50fc8817a3cff0

  • SHA1

    36b748aaf569bc70a80bff0d370da58f7d87ea10

  • SHA256

    5b7d6dd5e083883e2de39ec679c5a96a95e76b461072bcd985eefcf542f6f3fd

  • SHA512

    1ea03ceab60a7c82b62052867eee9e9e090e63467f74f18cae0285aedec3391aee261208f15cf720e469f53545bea3e3e6bc8d6118b8f9b7d6eb2d42c3edd18d

  • SSDEEP

    24576:fb/JZbr1coVWDAc/HTvMsaFnLKBkwDJBR99RZ+yUDTZX:T/JZbJIcLKBbJRZ+ZTN

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_6dfd9e59aae53b98ad50fc8817a3cff0

    • Size

      1.2MB

    • MD5

      6dfd9e59aae53b98ad50fc8817a3cff0

    • SHA1

      36b748aaf569bc70a80bff0d370da58f7d87ea10

    • SHA256

      5b7d6dd5e083883e2de39ec679c5a96a95e76b461072bcd985eefcf542f6f3fd

    • SHA512

      1ea03ceab60a7c82b62052867eee9e9e090e63467f74f18cae0285aedec3391aee261208f15cf720e469f53545bea3e3e6bc8d6118b8f9b7d6eb2d42c3edd18d

    • SSDEEP

      24576:fb/JZbr1coVWDAc/HTvMsaFnLKBkwDJBR99RZ+yUDTZX:T/JZbJIcLKBbJRZ+ZTN

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks