Overview

overview

10

Static

static

10

JaffaCakes...86.exe

windows7-x64

10

JaffaCakes...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5684bce3c18f75ebae7733150ebbd186

  • Size

    62KB

  • Sample

    250115-pa3n6atngq

  • MD5

    5684bce3c18f75ebae7733150ebbd186

  • SHA1

    c0183d4245815937d52dad4d05b532500decfe72

  • SHA256

    283240d245cd1d771651267af1b5b9bd2a75d3fe4be7562f4c178b865d99a917

  • SHA512

    65e2471dd25e9aa072bfdec6f1fa60d9d8ed2753096c57fd97ec8a6842e5dfe39eb899aac3eb8caf7904c5f4044835febcab7a0a4c723ae6d0ede8e70709e57a

  • SSDEEP

    1536:iT8qDqQ8K9MK3tGj7NwPZ6lIeXHWzl5NX3d:IqMyKdgIeXHWZh

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_5684bce3c18f75ebae7733150ebbd186

    • Size

      62KB

    • MD5

      5684bce3c18f75ebae7733150ebbd186

    • SHA1

      c0183d4245815937d52dad4d05b532500decfe72

    • SHA256

      283240d245cd1d771651267af1b5b9bd2a75d3fe4be7562f4c178b865d99a917

    • SHA512

      65e2471dd25e9aa072bfdec6f1fa60d9d8ed2753096c57fd97ec8a6842e5dfe39eb899aac3eb8caf7904c5f4044835febcab7a0a4c723ae6d0ede8e70709e57a

    • SSDEEP

      1536:iT8qDqQ8K9MK3tGj7NwPZ6lIeXHWzl5NX3d:IqMyKdgIeXHWZh

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks