Overview

overview

10

Static

static

10

JaffaCakes...97.exe

windows7-x64

10

JaffaCakes...97.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_575f15ddf7970c1288ab5c7a57a53797

  • Size

    81KB

  • Sample

    250129-qqq6qsyrgv

  • MD5

    575f15ddf7970c1288ab5c7a57a53797

  • SHA1

    5e8b9a879b6aab8872ae492056dfaaab3dbe50c0

  • SHA256

    c01ba8ff3b67562f9943d72bcacb2c9f7673ff54f221b6c75e4c571336d72eda

  • SHA512

    a51e670efc8c7cd5ac8ac272de16fc12ad13fac4513aed899530acdc71304b44f8fc96019eb391138b566cfde9f7f0c7c503fae56e89b510ededbc19268900ea

  • SSDEEP

    768:NBr+tjFqTPkAlfzsB1lr6an3emTASuvm2lzo+ICEeU2FMQ8P2o:zyRUHlrI1lr6anZT9uvm21o+If6MQ8P

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      JaffaCakes118_575f15ddf7970c1288ab5c7a57a53797

    • Size

      81KB

    • MD5

      575f15ddf7970c1288ab5c7a57a53797

    • SHA1

      5e8b9a879b6aab8872ae492056dfaaab3dbe50c0

    • SHA256

      c01ba8ff3b67562f9943d72bcacb2c9f7673ff54f221b6c75e4c571336d72eda

    • SHA512

      a51e670efc8c7cd5ac8ac272de16fc12ad13fac4513aed899530acdc71304b44f8fc96019eb391138b566cfde9f7f0c7c503fae56e89b510ededbc19268900ea

    • SSDEEP

      768:NBr+tjFqTPkAlfzsB1lr6an3emTASuvm2lzo+ICEeU2FMQ8P2o:zyRUHlrI1lr6anZT9uvm21o+If6MQ8P

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks