Overview

overview

10

Static

static

10

JaffaCakes...a9.exe

windows7-x64

10

JaffaCakes...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_15fe8988261b5587ac59b5ba3db06ba9

  • Size

    44KB

  • Sample

    250123-lrje3awkbp

  • MD5

    15fe8988261b5587ac59b5ba3db06ba9

  • SHA1

    0512d719ea22a0fbc6a6812cd3fe3328e7007220

  • SHA256

    b1d32ddc5df183861c284abe0642194460f91db2a31ed3b0a76bdf49992d3c9a

  • SHA512

    c3508641f39f93bfffb70c610d27bf4a618974953d3b70aeee21b36e912c24b754927ad3bf8fbbae496223a37e1f2f58be9a0b8f70e1527e60b7567e29f67cb6

  • SSDEEP

    768:7Br+tjFqTPkAlfztB1lr6anltmTw8evm2cfOTwYPIBzoHT:VyRUHlrL1lr6anuT7evm22uQJoHT

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_15fe8988261b5587ac59b5ba3db06ba9

    • Size

      44KB

    • MD5

      15fe8988261b5587ac59b5ba3db06ba9

    • SHA1

      0512d719ea22a0fbc6a6812cd3fe3328e7007220

    • SHA256

      b1d32ddc5df183861c284abe0642194460f91db2a31ed3b0a76bdf49992d3c9a

    • SHA512

      c3508641f39f93bfffb70c610d27bf4a618974953d3b70aeee21b36e912c24b754927ad3bf8fbbae496223a37e1f2f58be9a0b8f70e1527e60b7567e29f67cb6

    • SSDEEP

      768:7Br+tjFqTPkAlfztB1lr6anltmTw8evm2cfOTwYPIBzoHT:VyRUHlrL1lr6anuT7evm22uQJoHT

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks