Overview

overview

10

Static

static

10

JaffaCakes...e3.exe

windows7-x64

10

JaffaCakes...e3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7c4c26de0c71c222a1f3c8af803833e3

  • Size

    74KB

  • Sample

    250202-nc4tka1nbj

  • MD5

    7c4c26de0c71c222a1f3c8af803833e3

  • SHA1

    8a1a6ed21788f6f9006cebadb3a571399aa10c8e

  • SHA256

    2c057760da580b4b1050fe2ddfda3d002d90b65d201a1ff5b7f766ac59f024a5

  • SHA512

    a744819ffc920ec7d8ffa05b41c62ebd8b014965265145e5759a026dd43ff722dee99ac89af1acbcbcfd16b5764fc34076040b2ea3e650d5438816cd37c7badc

  • SSDEEP

    768:xuMAzLqSQ6kwATx94o9IWhWAKphMltZqgpKeC50euAYfN0bgJ5u/5uKzo7:ktLqSQ3w0+eIcKsw4K30Mzb85u/5umo7

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_7c4c26de0c71c222a1f3c8af803833e3

    • Size

      74KB

    • MD5

      7c4c26de0c71c222a1f3c8af803833e3

    • SHA1

      8a1a6ed21788f6f9006cebadb3a571399aa10c8e

    • SHA256

      2c057760da580b4b1050fe2ddfda3d002d90b65d201a1ff5b7f766ac59f024a5

    • SHA512

      a744819ffc920ec7d8ffa05b41c62ebd8b014965265145e5759a026dd43ff722dee99ac89af1acbcbcfd16b5764fc34076040b2ea3e650d5438816cd37c7badc

    • SSDEEP

      768:xuMAzLqSQ6kwATx94o9IWhWAKphMltZqgpKeC50euAYfN0bgJ5u/5uKzo7:ktLqSQ3w0+eIcKsw4K30Mzb85u/5umo7

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks