Extracted

• • Target

    JaffaCakes118_6f1db221f4c05134756c89502775178e

  • Size

    33KB

  • MD5

    6f1db221f4c05134756c89502775178e

  • SHA1

    068aff7340cff7a79546043d642c9cd43859e638

  • SHA256

    02d16eb52d9430a7f27f1e083f95b75c81d07072096ea7652dbc325836bde2ad

  • SHA512

    e759a2ccf5fcc8c9a9ee59a27f9fa74b8bdffe602c9602c118e9d7f774778b0a892975f4ffcade15c7922b432c3d1a7986169cc1c8f56f0ffd00a7dce0f24aa0

  • SSDEEP

    768:FMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lItzyC90O:ONW71rcYDAWeotvXlOm

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2