Extracted

• • Target

    JaffaCakes118_902d76af3d87637270a79b109f6f74c2

  • Size

    129KB

  • MD5

    902d76af3d87637270a79b109f6f74c2

  • SHA1

    0d9c98f1652a0e10155cc7e6fd26a825de549871

  • SHA256

    b8af7d26e306e76d81fc6fd153a961088f79b18f33b92931d7ddb33939f66bce

  • SHA512

    1095c8cf7d43cf13035a1a34dce0f78401f8c14e1306463253afa1a2238a48816b9520c2db2042b8d6099888bb586646132cccdea0dfee68cad0ddb6913935c5

  • SSDEEP

    3072:xmzpIq1STxz/V+WUIWCnbhgw95wGG2hS+lA1:IpF1STp0vCnbhgws7Ke1

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2