Overview

overview

10

Static

static

10

JaffaCakes...2d.exe

windows7-x64

10

JaffaCakes...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6492dd661b84d841ec7e6f4280354b2d

  • Size

    40KB

  • Sample

    250130-tyv2faylfk

  • MD5

    6492dd661b84d841ec7e6f4280354b2d

  • SHA1

    16ca1db90c38b30e611f32eef9cca5c9991327b2

  • SHA256

    b226032aee6682761c1cf349dcdf02c1e6fbbf9acbda2dcad1dfd2fe717c68fe

  • SHA512

    c50899e780f6830a8e153143ce19f8219e2ce4cc7e832ab1f3bdf80e5945964755e03e11f545628f156d48268713732ad67dbf2b24e8056f281cc6a0c91fc35d

  • SSDEEP

    768:FEohghdN12Ozhiow2Gkm6jc3/pBzNBwIldCzoc:Fv+zMOlw2GkmF3/Blduoc

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_6492dd661b84d841ec7e6f4280354b2d

    • Size

      40KB

    • MD5

      6492dd661b84d841ec7e6f4280354b2d

    • SHA1

      16ca1db90c38b30e611f32eef9cca5c9991327b2

    • SHA256

      b226032aee6682761c1cf349dcdf02c1e6fbbf9acbda2dcad1dfd2fe717c68fe

    • SHA512

      c50899e780f6830a8e153143ce19f8219e2ce4cc7e832ab1f3bdf80e5945964755e03e11f545628f156d48268713732ad67dbf2b24e8056f281cc6a0c91fc35d

    • SSDEEP

      768:FEohghdN12Ozhiow2Gkm6jc3/pBzNBwIldCzoc:Fv+zMOlw2GkmF3/Blduoc

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks