Overview

overview

10

Static

static

10

JaffaCakes...26.exe

windows7-x64

10

JaffaCakes...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_20aacda00bc0656f3dc7b9d546f31426

  • Size

    55KB

  • Sample

    250223-nqfnwswkax

  • MD5

    20aacda00bc0656f3dc7b9d546f31426

  • SHA1

    84f745317fac531406cda42b82ebf5811f3afbfc

  • SHA256

    348fbfa9c436d0d11f32bf6bdb4cc4bd581a569165a52e1375fe3df3a93ff389

  • SHA512

    acb605f526c10604d3041660d68432630a21195f6fa045921e1789832262ba8ccbeda7fedbf1ced16e2bcf121395572fbb7ed048434c23cfddf2e42919d54b68

  • SSDEEP

    768:muMAzLqSQ6kwATx94o0IWhWAKphMltZqgpKeC/0euAYfN0bgdzo6:BtLqSQ3w0+rIcKsw4Kx0Mzb4o6

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_20aacda00bc0656f3dc7b9d546f31426

    • Size

      55KB

    • MD5

      20aacda00bc0656f3dc7b9d546f31426

    • SHA1

      84f745317fac531406cda42b82ebf5811f3afbfc

    • SHA256

      348fbfa9c436d0d11f32bf6bdb4cc4bd581a569165a52e1375fe3df3a93ff389

    • SHA512

      acb605f526c10604d3041660d68432630a21195f6fa045921e1789832262ba8ccbeda7fedbf1ced16e2bcf121395572fbb7ed048434c23cfddf2e42919d54b68

    • SSDEEP

      768:muMAzLqSQ6kwATx94o0IWhWAKphMltZqgpKeC/0euAYfN0bgdzo6:BtLqSQ3w0+rIcKsw4Kx0Mzb4o6

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks