Overview

overview

10

Static

static

10

JaffaCakes...33.exe

windows7-x64

10

JaffaCakes...33.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4cb7ac150cd74b3751833451d9d68b33

  • Size

    40KB

  • Sample

    250115-exz7faspbr

  • MD5

    4cb7ac150cd74b3751833451d9d68b33

  • SHA1

    1d8f6f9cabb58b985100f326a9bba8ec080ac2e4

  • SHA256

    2c55d206322d315230784f0cc6a5b28425cda0084895b9a219898a5c1360b6ba

  • SHA512

    1f74ec40f939477ee9c39cda06feab1c2def63ba88b79cd8b234abfb210940821676cdd7a15763027b8d8fe77fa7754b891efd53b7e0b8807926a36b79aa4a17

  • SSDEEP

    768:bE9hghdN12Ozhiow2Gkmd3Iq/4BzNBwIldgzoRn:bu+zMOlw2GkmmqsBldooRn

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_4cb7ac150cd74b3751833451d9d68b33

    • Size

      40KB

    • MD5

      4cb7ac150cd74b3751833451d9d68b33

    • SHA1

      1d8f6f9cabb58b985100f326a9bba8ec080ac2e4

    • SHA256

      2c55d206322d315230784f0cc6a5b28425cda0084895b9a219898a5c1360b6ba

    • SHA512

      1f74ec40f939477ee9c39cda06feab1c2def63ba88b79cd8b234abfb210940821676cdd7a15763027b8d8fe77fa7754b891efd53b7e0b8807926a36b79aa4a17

    • SSDEEP

      768:bE9hghdN12Ozhiow2Gkmd3Iq/4BzNBwIldgzoRn:bu+zMOlw2GkmmqsBldooRn

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks