Extracted

• • Target

    JaffaCakes118_7ff6af61217b2bcf64abcc56eeb0f527

  • Size

    33KB

  • MD5

    7ff6af61217b2bcf64abcc56eeb0f527

  • SHA1

    e7bc780b8b765ab890e27b521b6e38e63483ac5c

  • SHA256

    e282e5541f3870cba5d3a1d4b6ed9cc62e7b5f8f7bd8e6fc9d31a968a8e2372f

  • SHA512

    afa1e5b87e7610fe5c89afff1edae5bad0f59ab50e7e4d5247d9ffb173c56ce94ae7e4eab4ab884de113401eb81bfd7af20a02ed58d2fc188537439cb7eeac6a

  • SSDEEP

    768:2MuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lktNJdDEyq:jNW71rcYDAWeotvXlyFDn

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2