Overview

overview

10

Static

static

10

JaffaCakes...bf.exe

windows7-x64

10

JaffaCakes...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1625972e82c4f1bba23c05979a47ddbf

  • Size

    44KB

  • Sample

    250222-asg3vavjbm

  • MD5

    1625972e82c4f1bba23c05979a47ddbf

  • SHA1

    2c1b938a6d7886651a78cdae11137205691b45fd

  • SHA256

    3b5d079ff3adee2b89ef5e1c03b7ca4eae46082e40685e70661c928b4063d48e

  • SHA512

    eb5bef3bac8bc2f3785dc0bbef3f8e6265af1f899cd7a9dc7f06d40ab70b9e2bf4422429e7cfc264adcf6d65c2b61d4cc657061c082fc45556eea8394f12a325

  • SSDEEP

    768:rBr+tjFKTPkAlfztO1lr6anXsGzZcUvm24fOTwYPI5zoi98BJ:FyR0HlrE1lr6an3zKUvm2yuQRoDBJ

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_1625972e82c4f1bba23c05979a47ddbf

    • Size

      44KB

    • MD5

      1625972e82c4f1bba23c05979a47ddbf

    • SHA1

      2c1b938a6d7886651a78cdae11137205691b45fd

    • SHA256

      3b5d079ff3adee2b89ef5e1c03b7ca4eae46082e40685e70661c928b4063d48e

    • SHA512

      eb5bef3bac8bc2f3785dc0bbef3f8e6265af1f899cd7a9dc7f06d40ab70b9e2bf4422429e7cfc264adcf6d65c2b61d4cc657061c082fc45556eea8394f12a325

    • SSDEEP

      768:rBr+tjFKTPkAlfztO1lr6anXsGzZcUvm24fOTwYPI5zoi98BJ:FyR0HlrE1lr6an3zKUvm2yuQRoDBJ

    Score
    10/10
    xtremeratpersistenceratspywarediscovery

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks