Extracted

• • Target

    JaffaCakes118_ccd2a0318aad47d51dd98d2136e1c644

  • Size

    65KB

  • MD5

    ccd2a0318aad47d51dd98d2136e1c644

  • SHA1

    fb37f0395f997f43090f548a313f534e7e720b54

  • SHA256

    4d7a327e4ea6564ffbfa727fd980f2d41a1582fd1edee25824e9eca55babf5d6

  • SHA512

    435fbc220511afa6609abeac9e7d2550a87658566047198c6ead50665f068c6f5d1ff192bda20fe2297b2853f9d9f28e8712cc54b7e6b549f8ab6d5eb4027037

  • SSDEEP

    768:e8m1Sq4NQErBsH1tzoisBKQI62ObAG/dqOXHsoAx5JXrUqLOY0pYKnA+7PoNweWo:ssq+QV4UObAdNoAf5UqiYmlArNweF

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Downloads MZ/PE file

  behavioral1behavioral2