Overview

overview

10

Static

static

10

JaffaCakes...c4.exe

windows7-x64

10

JaffaCakes...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_dd8bbb1a9f8001c29a196de67e945ec4

  • Size

    44KB

  • Sample

    250210-vegv5sxqdj

  • MD5

    dd8bbb1a9f8001c29a196de67e945ec4

  • SHA1

    17d6a3156bf9090205109793275c5a71dcb5ef1e

  • SHA256

    c48d3cf23250da32a7f85b91fe7523807619d94bc14405d4198cd91607961b67

  • SHA512

    222729b46c194adfbfeaeeb69b3c1bbd19f682eb493d5922b2b87bb6ed1b15647d3a7b7d0dc30f9e33539587c7995a248c40db187b9ff587ecd65a246e1a4efd

  • SSDEEP

    768:7Br+tjFqTPkAlfztB1lr6andMmTw8evm2cfOTwYPIBzoHT:VyRUHlrL1lr6anJT7evm22uQJoHT

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_dd8bbb1a9f8001c29a196de67e945ec4

    • Size

      44KB

    • MD5

      dd8bbb1a9f8001c29a196de67e945ec4

    • SHA1

      17d6a3156bf9090205109793275c5a71dcb5ef1e

    • SHA256

      c48d3cf23250da32a7f85b91fe7523807619d94bc14405d4198cd91607961b67

    • SHA512

      222729b46c194adfbfeaeeb69b3c1bbd19f682eb493d5922b2b87bb6ed1b15647d3a7b7d0dc30f9e33539587c7995a248c40db187b9ff587ecd65a246e1a4efd

    • SSDEEP

      768:7Br+tjFqTPkAlfztB1lr6andMmTw8evm2cfOTwYPIBzoHT:VyRUHlrL1lr6anJT7evm22uQJoHT

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks