Overview

overview

10

Static

static

3

JaffaCakes...50.exe

windows7-x64

10

JaffaCakes...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7b2a9d84735556d1badbf8edd0b53950

  • Size

    248KB

  • Sample

    250104-w5drvatkdj

  • MD5

    7b2a9d84735556d1badbf8edd0b53950

  • SHA1

    a9c6542acf03a539de75c61c716f3b41239d2b2f

  • SHA256

    5b34d907f8a14bcd9e9ba77c8b297f4aef9fb2e1b5e40ba4a0ca1fb8acdc8044

  • SHA512

    f465170a26492878cf0c9468cbd18270a74f9b5e88e7b326ee9f8277a179aff53912680b131d0c12c61e14828cac42ba334f7885569e1c0ba55dcc65d25d8591

  • SSDEEP

    3072:2pQjMB7q0pvVT3oKSDHmCh1ot3rtAypzFi+cpm7spchKH0JuBQw8HpPt8oWJRMH:dP0T7oKuHVet3JAYC29wUlt8nJWH

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_7b2a9d84735556d1badbf8edd0b53950

    • Size

      248KB

    • MD5

      7b2a9d84735556d1badbf8edd0b53950

    • SHA1

      a9c6542acf03a539de75c61c716f3b41239d2b2f

    • SHA256

      5b34d907f8a14bcd9e9ba77c8b297f4aef9fb2e1b5e40ba4a0ca1fb8acdc8044

    • SHA512

      f465170a26492878cf0c9468cbd18270a74f9b5e88e7b326ee9f8277a179aff53912680b131d0c12c61e14828cac42ba334f7885569e1c0ba55dcc65d25d8591

    • SSDEEP

      3072:2pQjMB7q0pvVT3oKSDHmCh1ot3rtAypzFi+cpm7spchKH0JuBQw8HpPt8oWJRMH:dP0T7oKuHVet3JAYC29wUlt8nJWH

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks