Overview

overview

10

Static

static

10

JaffaCakes...69.exe

windows7-x64

JaffaCakes...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e114c68b60bfc4c8ff94ca36676b2369

  • Size

    260KB

  • Sample

    250211-bc2yratpaw

  • MD5

    e114c68b60bfc4c8ff94ca36676b2369

  • SHA1

    3257bffb337352a9ce74a08673336124e910846d

  • SHA256

    1eaa6627a6167db9cdca4ebf63f8a593b2915db12987aee4fb99324005da7ec2

  • SHA512

    85b1b7379498401a451056f317e987aac35a38fe5fb7bdb09a546acd63ada06dd68d6bfdb2cce9b7a82d69755ebaa32c8d058254c8d78d3132f3e0f41a31ab0f

  • SSDEEP

    6144:CcnIvlelJ18qGhvwSAWBWuiUlvgzSfhN6o+j5KxzeOPFki:xylelrx0vwS9BW2I0zijUFe+/

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_e114c68b60bfc4c8ff94ca36676b2369

    • Size

      260KB

    • MD5

      e114c68b60bfc4c8ff94ca36676b2369

    • SHA1

      3257bffb337352a9ce74a08673336124e910846d

    • SHA256

      1eaa6627a6167db9cdca4ebf63f8a593b2915db12987aee4fb99324005da7ec2

    • SHA512

      85b1b7379498401a451056f317e987aac35a38fe5fb7bdb09a546acd63ada06dd68d6bfdb2cce9b7a82d69755ebaa32c8d058254c8d78d3132f3e0f41a31ab0f

    • SSDEEP

      6144:CcnIvlelJ18qGhvwSAWBWuiUlvgzSfhN6o+j5KxzeOPFki:xylelrx0vwS9BW2I0zijUFe+/

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks