Extracted

• • Target

    JaffaCakes118_7d357e0fcff40b6017eb4830b586ea3d

  • Size

    33KB

  • MD5

    7d357e0fcff40b6017eb4830b586ea3d

  • SHA1

    c84b59ad697e7a186f193943b8c8f35edc6bf0e4

  • SHA256

    8e6af498f3dd95539b337d2b16b617de1ebb7cc22c29b94bdf196586b43ca3df

  • SHA512

    45decc2f636f565756fbb472689eff3040ffe1b0bd5b08b8a9bd3ac47890846845536290fdc8dd7e6d619889cf180054516c3787c2dadc6899fbca7a8bcac1fa

  • SSDEEP

    768:nMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lKtzpKs:MNW71rcYDAWeotvXlIo

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2