Overview

overview

10

Static

static

10

JaffaCakes...fd.exe

windows7-x64

10

JaffaCakes...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_58bbe82b575295c20e89016d2ef374fd

  • Size

    65KB

  • Sample

    250115-q7tyyswlgq

  • MD5

    58bbe82b575295c20e89016d2ef374fd

  • SHA1

    1bd19ef2fe43392f4132d22a68838f6f5434fb28

  • SHA256

    4fc24f704d51b3982ea7b4563fd5c0bb6e482c3051b11e4f8fb90d440b07bf1f

  • SHA512

    0c31cd11e5e7048f9e6dcb6c203a7f3dfd32bddc8b7fb74a280fe89ff21ef89b155bd7edbbe40811eb26940ea5b4f6baa176f35f5f5078637fa8e708357cd6b1

  • SSDEEP

    1536:Dsq+QO4rObAdNoAf9UqiY1lprNwhhoKDbY:On4raRapmoK4

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_58bbe82b575295c20e89016d2ef374fd

    • Size

      65KB

    • MD5

      58bbe82b575295c20e89016d2ef374fd

    • SHA1

      1bd19ef2fe43392f4132d22a68838f6f5434fb28

    • SHA256

      4fc24f704d51b3982ea7b4563fd5c0bb6e482c3051b11e4f8fb90d440b07bf1f

    • SHA512

      0c31cd11e5e7048f9e6dcb6c203a7f3dfd32bddc8b7fb74a280fe89ff21ef89b155bd7edbbe40811eb26940ea5b4f6baa176f35f5f5078637fa8e708357cd6b1

    • SSDEEP

      1536:Dsq+QO4rObAdNoAf9UqiY1lprNwhhoKDbY:On4raRapmoK4

    Score
    10/10
    xtremeratpersistenceratspywarediscovery

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks