Overview

overview

10

Static

static

10

JaffaCakes...dc.exe

windows7-x64

10

JaffaCakes...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2038d57b5f9f38a82b852227c60a55dc

  • Size

    40KB

  • Sample

    250124-lt3xgssmdx

  • MD5

    2038d57b5f9f38a82b852227c60a55dc

  • SHA1

    61ec85bc40d404588c31bc07ddde94c64dac52cd

  • SHA256

    7f79da6edc2a20c18c95f9d744b720de35b861498c03e8e10a01825dcdf3a43f

  • SHA512

    94c0c07b0cc95e5f250dc2be8d11fa9fc8382a3a66047c2f3603ccc93143e587cf7a4bdd60bb8fad9138883c7bcb82a0cd4d183799d55efc5bdecdaa0f698327

  • SSDEEP

    768:SEhhghdN12Ozhiow2GkmFjf3/pBzNBwIldCzoc:Sa+zMOlw2GkmR3/Blduoc

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_2038d57b5f9f38a82b852227c60a55dc

    • Size

      40KB

    • MD5

      2038d57b5f9f38a82b852227c60a55dc

    • SHA1

      61ec85bc40d404588c31bc07ddde94c64dac52cd

    • SHA256

      7f79da6edc2a20c18c95f9d744b720de35b861498c03e8e10a01825dcdf3a43f

    • SHA512

      94c0c07b0cc95e5f250dc2be8d11fa9fc8382a3a66047c2f3603ccc93143e587cf7a4bdd60bb8fad9138883c7bcb82a0cd4d183799d55efc5bdecdaa0f698327

    • SSDEEP

      768:SEhhghdN12Ozhiow2GkmFjf3/pBzNBwIldCzoc:Sa+zMOlw2GkmR3/Blduoc

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks