General

  • Target

    JaffaCakes118_a05cb17861be3132760f054dddcbd241

  • Size

    97KB

  • Sample

    250407-w5ap7azzfx

  • MD5

    a05cb17861be3132760f054dddcbd241

  • SHA1

    46b3c98e572d70a625e7d7c788145f055c939f2b

  • SHA256

    131678102693d7cb312432265a563e56ec7c05f120f7ea8615df3827807fe770

  • SHA512

    fe8bf2a583497da347e2f3515ce527fc9e7e974b954374d38b1e88ce54bda410d42d3e7701d0396c7cdc478f7a76f1872c2f6d8021cac9d1a4614a9c38e67459

  • SSDEEP

    3072:KNW7dEvotvX5gXI3oWBcljfed0zQVQen482qlezyx+V:KNW7mvIJuIn6xOQYN2qlezO0

Malware Config

Targets

    • Target

      JaffaCakes118_a05cb17861be3132760f054dddcbd241

    • Size

      97KB

    • MD5

      a05cb17861be3132760f054dddcbd241

    • SHA1

      46b3c98e572d70a625e7d7c788145f055c939f2b

    • SHA256

      131678102693d7cb312432265a563e56ec7c05f120f7ea8615df3827807fe770

    • SHA512

      fe8bf2a583497da347e2f3515ce527fc9e7e974b954374d38b1e88ce54bda410d42d3e7701d0396c7cdc478f7a76f1872c2f6d8021cac9d1a4614a9c38e67459

    • SSDEEP

      3072:KNW7dEvotvX5gXI3oWBcljfed0zQVQen482qlezyx+V:KNW7mvIJuIn6xOQYN2qlezO0

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks