Overview

overview

10

Static

static

10

JaffaCakes...0b.exe

windows7-x64

10

JaffaCakes...0b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7e08188060091ce1ca7b10df5ec2ed0b

  • Size

    42KB

  • Sample

    250202-sh9n8awrfx

  • MD5

    7e08188060091ce1ca7b10df5ec2ed0b

  • SHA1

    51962d30088b1f7a1f12452fe635e9c81446f82c

  • SHA256

    5aac91eeaede45b75b7f340a10cad5dec90c25d72d0493c7ad81efbf8169685f

  • SHA512

    bbb56565e8814a6dec5b2a2d2d5c7d4cf03dde0fa46ff425714e8af5730cbf23a207a37a5876bcf815f7fef15480cdb4b7d5e2be236e2096ed0ee083587b93dc

  • SSDEEP

    768:nBr+tjFqTPkAlfztB1lr6an33mTA8uvm2DfOTwYPI:ByRUHlrL1lr6anmTLuvm2buQ

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_7e08188060091ce1ca7b10df5ec2ed0b

    • Size

      42KB

    • MD5

      7e08188060091ce1ca7b10df5ec2ed0b

    • SHA1

      51962d30088b1f7a1f12452fe635e9c81446f82c

    • SHA256

      5aac91eeaede45b75b7f340a10cad5dec90c25d72d0493c7ad81efbf8169685f

    • SHA512

      bbb56565e8814a6dec5b2a2d2d5c7d4cf03dde0fa46ff425714e8af5730cbf23a207a37a5876bcf815f7fef15480cdb4b7d5e2be236e2096ed0ee083587b93dc

    • SSDEEP

      768:nBr+tjFqTPkAlfztB1lr6an33mTA8uvm2DfOTwYPI:ByRUHlrL1lr6anmTLuvm2buQ

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks