Overview

overview

10

Static

static

10

JaffaCakes...f2.exe

windows7-x64

10

JaffaCakes...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_76b11849d41df0f43c1fe4e780852bf2

  • Size

    65KB

  • Sample

    250201-3dsv1svnds

  • MD5

    76b11849d41df0f43c1fe4e780852bf2

  • SHA1

    00a74cd5dad6974ccb1ea49a5fad70f5b4c15625

  • SHA256

    6121d9b2eb307726d78bd4ba089aa5a217b2a7f9d8c283ae9a1cbec087c0b8fa

  • SHA512

    fa485f7edd93ac530ad93e600dfea84d4acaff73b8d75d39323705d2d8982f287e189e917bc7346010275fc5dfef991ca615049f0f61443a8065400055cc5329

  • SSDEEP

    1536:ssq+QV4rObAdNoAf5UqiYmlArNwCobx8v:p44rOR1Ajo1O

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_76b11849d41df0f43c1fe4e780852bf2

    • Size

      65KB

    • MD5

      76b11849d41df0f43c1fe4e780852bf2

    • SHA1

      00a74cd5dad6974ccb1ea49a5fad70f5b4c15625

    • SHA256

      6121d9b2eb307726d78bd4ba089aa5a217b2a7f9d8c283ae9a1cbec087c0b8fa

    • SHA512

      fa485f7edd93ac530ad93e600dfea84d4acaff73b8d75d39323705d2d8982f287e189e917bc7346010275fc5dfef991ca615049f0f61443a8065400055cc5329

    • SSDEEP

      1536:ssq+QV4rObAdNoAf5UqiYmlArNwCobx8v:p44rOR1Ajo1O

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks