Extracted

• • Target

    JaffaCakes118_837d0943208f808bc56d3cceb896d8b5

  • Size

    88KB

  • MD5

    837d0943208f808bc56d3cceb896d8b5

  • SHA1

    21ebea059070db1513ee3f257326c6a29d6445cc

  • SHA256

    ab422308ca8c908fcea4818466657560af1aec6fd70e6b3665bcd4856cd6239c

  • SHA512

    cea192f895f5be9306bb3779be048eac7be72ac131e08963c353520b122aebfdcfe1931b2ffd8684fd723c7f5c59d5e1b83d1ee5bdf06ab56ef6d00651548669

  • SSDEEP

    1536:VbuN8xBay1T90uFKVfLSQqPgPzxJsHMCEVg0VHbEc:sIaOT90u4RKMCEV3VHbEc

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2