Extracted

• • Target

    JaffaCakes118_fa8df7c7aef3b836749f3301de68fb8e

  • Size

    65KB

  • MD5

    fa8df7c7aef3b836749f3301de68fb8e

  • SHA1

    1538a376093677bd76fc408d228dacd7601cc08b

  • SHA256

    a489de4d76d51260ad01b3c7b836e7983e5c96674d5b6aa10848eb318ffd3ab8

  • SHA512

    7190e373d330629ccd68de006bb777bee15f253fe6dda9fee36299a61d926a1467e3c5aea0a6127458e042ada4c97b8211721ce8b8f24ee28c9a5859887e6dfc

  • SSDEEP

    768:e8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY0pYKnA+7PoNwBzJ:ssq+QV4rObAdNoAf5UqiYmlArNwJoWcC

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Downloads MZ/PE file

  behavioral1behavioral2