Overview

overview

9

Static

static

3

Xtreme Fre...ot.exe

windows7-x64

9

Xtreme Fre...ot.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_27e133eb1edec33814195b10b4b1945c

  • Size

    1.5MB

  • Sample

    250226-xgbg9ayxgz

  • MD5

    27e133eb1edec33814195b10b4b1945c

  • SHA1

    9f3a0a3eab9df03aba7f50978999d2cb13cbb6fd

  • SHA256

    97e43c0739f2320145d96d721f28344ade5a72266a193fd68427949a2437cbde

  • SHA512

    9e487399cee11e08550532e0e5e8b1c1f261db151eb0dbfd48860c7eb898e8aa22f36e1cae4030fc71c18a99d796c309ece609339d751419de4202795dd4bd9a

  • SSDEEP

    24576:kfeNN/bzZroC3cTuEBfP5pF4tgSdekQKw2P21M1L7cV95FxrM2pcPIt5Wx9W23HH:yef//Z53cXfhctq9Kw2PPL7cg2IadyQa

Score
9/10
cryptonediscoverypacker

Malware Config

Targets

    • Target

      Xtreme Free Commission Bot/Xtreme Free Commission Bot.exe

    • Size

      2.1MB

    • MD5

      e652c139242bac4059bfcf8371f0870a

    • SHA1

      d7945051e975384d8d848bb433cae920f824bf4b

    • SHA256

      67d25b483962a7f6c59c55e7a62a69a553ab81e19c1deefd91f79da85fd68437

    • SHA512

      a39e851ae0afb7485464fee17cde747867fda924164d634492abdd00cd64518a628db3b01dd12789c4ffdd11b607eb3f79084331a41bf98845ce744860792503

    • SSDEEP

      49152:Kyi/XpI4/xTcpdJutQZYW2P7LNWgy4ChJS+03:KyJpvuVWQhQJS73

    Score
    9/10
    cryptonediscoverypacker

    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

      cryptonepacker

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks