Overview

overview

10

Static

static

3

JaffaCakes...2f.exe

windows7-x64

10

JaffaCakes...2f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a59d604f68d17572e8277dd461af942f

  • Size

    130KB

  • Sample

    250206-bemxlszpdq

  • MD5

    a59d604f68d17572e8277dd461af942f

  • SHA1

    a94d25d8c59251cb00b8b2d7746213b0f146571d

  • SHA256

    6b1c48540d967dce47807f8bb93a23414c0ae44f81857adc241648a578bc0bbe

  • SHA512

    6223e37871c4fed694d2153ff3e032d6f143a1b15cffd10190543dd8b3ec4259ee4eceaddc40d6926bb4837c92edf8c0e9f10948efc038cfe6525066e7b4eacd

  • SSDEEP

    1536:zPR0BFCHDTY08s3i80BQfYEpCHD13zXpdyz8qyoYQqw9PBZueu0An2aV+NVi1vRn:oN0jpc3FQz5PyeX2V+VQRBKLaOZV+n

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_a59d604f68d17572e8277dd461af942f

    • Size

      130KB

    • MD5

      a59d604f68d17572e8277dd461af942f

    • SHA1

      a94d25d8c59251cb00b8b2d7746213b0f146571d

    • SHA256

      6b1c48540d967dce47807f8bb93a23414c0ae44f81857adc241648a578bc0bbe

    • SHA512

      6223e37871c4fed694d2153ff3e032d6f143a1b15cffd10190543dd8b3ec4259ee4eceaddc40d6926bb4837c92edf8c0e9f10948efc038cfe6525066e7b4eacd

    • SSDEEP

      1536:zPR0BFCHDTY08s3i80BQfYEpCHD13zXpdyz8qyoYQqw9PBZueu0An2aV+NVi1vRn:oN0jpc3FQz5PyeX2V+VQRBKLaOZV+n

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks