Overview

overview

10

Static

static

10

JaffaCakes...6e.exe

windows7-x64

10

JaffaCakes...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7b4d6d7666477d66a260932a6964f76e

  • Size

    62KB

  • Sample

    250202-k69p5avmd1

  • MD5

    7b4d6d7666477d66a260932a6964f76e

  • SHA1

    177f985429b8f815ca27c3ea9a32ed3dd68a8c07

  • SHA256

    9711ff75820fcc60df1010ed625bc2d08ce563b8dce01a3f9c38323107bfbc27

  • SHA512

    f906f52791ccc88c920fb75a55c8e5e44a5338b0bde140978c3c0e80d45be2ef1de72ae207761759d15a913cdd890133d1896ec63eb2b8f7d2be8eda392524b5

  • SSDEEP

    1536:B8qDqQMKQFKOt/jbNMPZ6tYe/HWMloNX33:VqcqKC/Ue/HWS0

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_7b4d6d7666477d66a260932a6964f76e

    • Size

      62KB

    • MD5

      7b4d6d7666477d66a260932a6964f76e

    • SHA1

      177f985429b8f815ca27c3ea9a32ed3dd68a8c07

    • SHA256

      9711ff75820fcc60df1010ed625bc2d08ce563b8dce01a3f9c38323107bfbc27

    • SHA512

      f906f52791ccc88c920fb75a55c8e5e44a5338b0bde140978c3c0e80d45be2ef1de72ae207761759d15a913cdd890133d1896ec63eb2b8f7d2be8eda392524b5

    • SSDEEP

      1536:B8qDqQMKQFKOt/jbNMPZ6tYe/HWMloNX33:VqcqKC/Ue/HWS0

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks