Overview

overview

10

Static

static

10

JaffaCakes...a3.exe

windows7-x64

10

JaffaCakes...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ac57fb4e4778156ade37872812bc25a3

  • Size

    62KB

  • Sample

    250118-rvhwlavrgv

  • MD5

    ac57fb4e4778156ade37872812bc25a3

  • SHA1

    347d6da727acb1e07a6e9beacc2bde048a55f4a5

  • SHA256

    154d2da149cc0852aa59b8cd9d4eb3d7af4003b8a1d1aa319b015e6cecef1c00

  • SHA512

    2874a01702bb38351cd98c1cdb3d7d454f65101c940e1bcc37d09859e6ee85533d6c02ebd0190fe4ab9689ecee2732b9db39e2d2060ee57b0fd14799fbf7cfc9

  • SSDEEP

    1536:iT8qDqQ8KtMK3tGjbNwPZ6lIeXHWzl5NX3d:IqMiKdcIeXHWZh

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_ac57fb4e4778156ade37872812bc25a3

    • Size

      62KB

    • MD5

      ac57fb4e4778156ade37872812bc25a3

    • SHA1

      347d6da727acb1e07a6e9beacc2bde048a55f4a5

    • SHA256

      154d2da149cc0852aa59b8cd9d4eb3d7af4003b8a1d1aa319b015e6cecef1c00

    • SHA512

      2874a01702bb38351cd98c1cdb3d7d454f65101c940e1bcc37d09859e6ee85533d6c02ebd0190fe4ab9689ecee2732b9db39e2d2060ee57b0fd14799fbf7cfc9

    • SSDEEP

      1536:iT8qDqQ8KtMK3tGjbNwPZ6lIeXHWzl5NX3d:IqMiKdcIeXHWZh

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks