Overview

overview

10

Static

static

3

JaffaCakes...60.exe

windows7-x64

10

JaffaCakes...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e8d3bb336339dd1af4d64f6fdebcfa60

  • Size

    372KB

  • Sample

    250120-qqmhjs1nfq

  • MD5

    e8d3bb336339dd1af4d64f6fdebcfa60

  • SHA1

    bf3b1b32effdde2a3e3bae15c9e76e42cb694eb8

  • SHA256

    2988a2c0f0aa9ed1aa8feee24bca194bbaf8d907a5f120910db6f4bb3c7adaac

  • SHA512

    ef96e5809aea41dde9cb7d24cf6dffb563cb59da379223b47b1df48c4c583c5c81edc89f7ce2a7088d0c7c6b1745e6a64f75379a15d936b21dc6545393b8aadc

  • SSDEEP

    3072:8iKmc7GSk7CyEJMDtkkXfC8sbYH6irTi:RKgXXa8xH6irT

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_e8d3bb336339dd1af4d64f6fdebcfa60

    • Size

      372KB

    • MD5

      e8d3bb336339dd1af4d64f6fdebcfa60

    • SHA1

      bf3b1b32effdde2a3e3bae15c9e76e42cb694eb8

    • SHA256

      2988a2c0f0aa9ed1aa8feee24bca194bbaf8d907a5f120910db6f4bb3c7adaac

    • SHA512

      ef96e5809aea41dde9cb7d24cf6dffb563cb59da379223b47b1df48c4c583c5c81edc89f7ce2a7088d0c7c6b1745e6a64f75379a15d936b21dc6545393b8aadc

    • SSDEEP

      3072:8iKmc7GSk7CyEJMDtkkXfC8sbYH6irTi:RKgXXa8xH6irT

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks