Overview

overview

10

Static

static

10

JaffaCakes...67.exe

windows7-x64

10

JaffaCakes...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8e4ae0d65c61a1e7b754c1cdf6627567

  • Size

    44KB

  • Sample

    250204-bac7lsyrc1

  • MD5

    8e4ae0d65c61a1e7b754c1cdf6627567

  • SHA1

    9806e1cc628b0c176feb10b64243736386881efa

  • SHA256

    95057371eab64ab4eba52a4df8cd3ef2d4e96b1b1a09a27ad17e4b5d20517e64

  • SHA512

    c98bbcf0f9f4ca1f3e0e15f7c8694bad52f0b10b2874972b798c148cc62fd9fd799ea792d3c56304640cb63c797dbd426cbbc3ea1e127d5b98c2c3c5925a1bca

  • SSDEEP

    768:nD++tjFqTPkAlfzth1lr6annsmTq8uvm2DfOTwYPIWzoOL:DNRUHlrr1lr6anHTZuvm2buQKoOL

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_8e4ae0d65c61a1e7b754c1cdf6627567

    • Size

      44KB

    • MD5

      8e4ae0d65c61a1e7b754c1cdf6627567

    • SHA1

      9806e1cc628b0c176feb10b64243736386881efa

    • SHA256

      95057371eab64ab4eba52a4df8cd3ef2d4e96b1b1a09a27ad17e4b5d20517e64

    • SHA512

      c98bbcf0f9f4ca1f3e0e15f7c8694bad52f0b10b2874972b798c148cc62fd9fd799ea792d3c56304640cb63c797dbd426cbbc3ea1e127d5b98c2c3c5925a1bca

    • SSDEEP

      768:nD++tjFqTPkAlfzth1lr6annsmTq8uvm2DfOTwYPIWzoOL:DNRUHlrr1lr6anHTZuvm2buQKoOL

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks