Overview

overview

10

Static

static

10

JaffaCakes...a3.exe

windows7-x64

10

JaffaCakes...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ccb3b747eab052919269875bd7c9dba3

  • Size

    44KB

  • Sample

    250209-h9kjas1lbl

  • MD5

    ccb3b747eab052919269875bd7c9dba3

  • SHA1

    c3746b5304232eb96e5f77b265e3d76b5985dd8d

  • SHA256

    bc2ec2c7376106c75d4d8038b55447b9d12c1f4a77d15b58821306d0bf6406b3

  • SHA512

    0cac5e82cd7fd3d214db94811de8e83a3f3db7b9f455e7832f75e4f0212070fc92821bc0c12c3e36d5838e83dbd19b5211d566372ae83a3dfde7360c36e4979b

  • SSDEEP

    768:1Br+tjF4TPkAlfztB1lr6anQ9mTwcuvm2DfOTwYPIVzoF:ryRuHlrL1lr6anPTbuvm2buQFoF

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_ccb3b747eab052919269875bd7c9dba3

    • Size

      44KB

    • MD5

      ccb3b747eab052919269875bd7c9dba3

    • SHA1

      c3746b5304232eb96e5f77b265e3d76b5985dd8d

    • SHA256

      bc2ec2c7376106c75d4d8038b55447b9d12c1f4a77d15b58821306d0bf6406b3

    • SHA512

      0cac5e82cd7fd3d214db94811de8e83a3f3db7b9f455e7832f75e4f0212070fc92821bc0c12c3e36d5838e83dbd19b5211d566372ae83a3dfde7360c36e4979b

    • SSDEEP

      768:1Br+tjF4TPkAlfztB1lr6anQ9mTwcuvm2DfOTwYPIVzoF:ryRuHlrL1lr6anPTbuvm2buQFoF

    Score
    10/10
    xtremeratpersistenceratspywarediscovery

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks