Extracted

• • Target

    JaffaCakes118_1a2271f8b82507cf1d5b9339f566140a

  • Size

    428KB

  • MD5

    1a2271f8b82507cf1d5b9339f566140a

  • SHA1

    9b03f1c1f5728414bc1728e6edf23953a37987c2

  • SHA256

    52ab98caf46cf98da6489158463930fa3af458676b2e9f5a78d50a1fca227a96

  • SHA512

    878f358931b5a402948184fb61f8df6517f080f041a17d6900864afcece37d1291c2190786d8f69020a24982419775889cee8bde15ce219edd9f5a1d41b92c26

  • SSDEEP

    6144:nb/tnko8JhQL5E6/moaJ9MUsdiJ9MUsdR:nZn8TQq9oudq

  Score

  10^/10

  xtremeratdiscoverypersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2