Overview

overview

10

Static

static

10

JaffaCakes...54.exe

windows7-x64

10

JaffaCakes...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5f5a81de911e177f5a3a678b3ff88054

  • Size

    65KB

  • Sample

    250115-xn4sda1qbw

  • MD5

    5f5a81de911e177f5a3a678b3ff88054

  • SHA1

    809e43d0830bddbb2c928416a982daa3944deb73

  • SHA256

    168d5492452ca26722cbb1e8a53c3d487c4ade77e38334efdfa1a6bf9cfdf57f

  • SHA512

    d3e61b720a69945cbcfdc303da3eac114ff02341eae34a30c2d4bb7ca27964e700161250f0196d1470ddb3cc7b0b66f51165b5fb3ff8075e20df026abbd8066a

  • SSDEEP

    768:w8m1Sq4NQ0rBsH19zoisBRQI6dObAG/dq8uW29IfncK/yyR+P29jfwipKPAu7Xon:ysq+QF/rObAdXWpfvyHrojNwif1z

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_5f5a81de911e177f5a3a678b3ff88054

    • Size

      65KB

    • MD5

      5f5a81de911e177f5a3a678b3ff88054

    • SHA1

      809e43d0830bddbb2c928416a982daa3944deb73

    • SHA256

      168d5492452ca26722cbb1e8a53c3d487c4ade77e38334efdfa1a6bf9cfdf57f

    • SHA512

      d3e61b720a69945cbcfdc303da3eac114ff02341eae34a30c2d4bb7ca27964e700161250f0196d1470ddb3cc7b0b66f51165b5fb3ff8075e20df026abbd8066a

    • SSDEEP

      768:w8m1Sq4NQ0rBsH19zoisBRQI6dObAG/dq8uW29IfncK/yyR+P29jfwipKPAu7Xon:ysq+QF/rObAdXWpfvyHrojNwif1z

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks