Overview

overview

10

Static

static

10

JaffaCakes...07.exe

windows7-x64

10

JaffaCakes...07.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9839bce14d0111d2ea7737eef55e5e07

  • Size

    76KB

  • Sample

    250204-zwhafsslb1

  • MD5

    9839bce14d0111d2ea7737eef55e5e07

  • SHA1

    c16c5f1a9bb7b6108d88398adb3cea2c013b8be0

  • SHA256

    0e5b70a3257bdf987ec6638e7e2439d2393dc4ccc2b7701af60b3e6cf02e0d90

  • SHA512

    5f0e4cbf82a9cda6b9d5b952e498a3081d57f3363d8605a16199f783d356c8761cb1837b3567a63c332e54c516db7bf148d77d1a381f504e967b3c0c5fd9a731

  • SSDEEP

    1536:8T8qDqQ8K91KRtGjbNnPZ6ZbeXHWDl5NX3bFruFrC:iqM/KPcWeXHWJXFruFrC

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_9839bce14d0111d2ea7737eef55e5e07

    • Size

      76KB

    • MD5

      9839bce14d0111d2ea7737eef55e5e07

    • SHA1

      c16c5f1a9bb7b6108d88398adb3cea2c013b8be0

    • SHA256

      0e5b70a3257bdf987ec6638e7e2439d2393dc4ccc2b7701af60b3e6cf02e0d90

    • SHA512

      5f0e4cbf82a9cda6b9d5b952e498a3081d57f3363d8605a16199f783d356c8761cb1837b3567a63c332e54c516db7bf148d77d1a381f504e967b3c0c5fd9a731

    • SSDEEP

      1536:8T8qDqQ8K91KRtGjbNnPZ6ZbeXHWDl5NX3bFruFrC:iqM/KPcWeXHWJXFruFrC

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks