Overview

overview

10

Static

static

3

JaffaCakes...a5.exe

windows7-x64

10

JaffaCakes...a5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a7522dc42b76f61883564549343933a5

  • Size

    226KB

  • Sample

    250206-e6v9vaspa1

  • MD5

    a7522dc42b76f61883564549343933a5

  • SHA1

    e88bfb65b7a1436670834958e2e034368ba1e499

  • SHA256

    7fce756c9892c833c77140ca318cfdc5e53aac47f22e32e17a7355ac8b3c7a41

  • SHA512

    1f42bbd6d59b6540fa0096aa83393264c8ee7c4492a971e06eb29166a6aa7397e35920f7ec55ea3f7a7f283637811922ddaf74d970858e111799e6df58ecde6b

  • SSDEEP

    6144:UOy2YCh2Lsj520BIQzTpJw7GQwdKX5w+OGhLeUGC9UEBGMw:UOy2YUusU2JzTk7N/XWzGd5t

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_a7522dc42b76f61883564549343933a5

    • Size

      226KB

    • MD5

      a7522dc42b76f61883564549343933a5

    • SHA1

      e88bfb65b7a1436670834958e2e034368ba1e499

    • SHA256

      7fce756c9892c833c77140ca318cfdc5e53aac47f22e32e17a7355ac8b3c7a41

    • SHA512

      1f42bbd6d59b6540fa0096aa83393264c8ee7c4492a971e06eb29166a6aa7397e35920f7ec55ea3f7a7f283637811922ddaf74d970858e111799e6df58ecde6b

    • SSDEEP

      6144:UOy2YCh2Lsj520BIQzTpJw7GQwdKX5w+OGhLeUGC9UEBGMw:UOy2YUusU2JzTk7N/XWzGd5t

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks