Overview

overview

10

Static

static

10

JaffaCakes...b8.exe

windows7-x64

10

JaffaCakes...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a7b247ffd8dcd8eb2056e76c6d66c7b8

  • Size

    62KB

  • Sample

    250118-mwdwta1lfw

  • MD5

    a7b247ffd8dcd8eb2056e76c6d66c7b8

  • SHA1

    bd64602a3ace7347706080e38bab47edaa5326c1

  • SHA256

    1ede96e29a634bc5dd86d853d5679884c71f33ac2de7e36f6bc61a68223de218

  • SHA512

    7a7011dbf7c3c59d69cfb790fac4837b58d17609bbd58875e0e92831f0baaad10f8b919306071142933eb7448352c877f0d8effb4856294cfa7a63aff31feab5

  • SSDEEP

    1536:iT8qDqQ8K9MK3tGjbNwPZ6vIeXHWzl5NX3d:IqMyKdceeXHWZh

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_a7b247ffd8dcd8eb2056e76c6d66c7b8

    • Size

      62KB

    • MD5

      a7b247ffd8dcd8eb2056e76c6d66c7b8

    • SHA1

      bd64602a3ace7347706080e38bab47edaa5326c1

    • SHA256

      1ede96e29a634bc5dd86d853d5679884c71f33ac2de7e36f6bc61a68223de218

    • SHA512

      7a7011dbf7c3c59d69cfb790fac4837b58d17609bbd58875e0e92831f0baaad10f8b919306071142933eb7448352c877f0d8effb4856294cfa7a63aff31feab5

    • SSDEEP

      1536:iT8qDqQ8K9MK3tGjbNwPZ6vIeXHWzl5NX3d:IqMyKdceeXHWZh

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks