Overview

overview

10

Static

static

3

JaffaCakes...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a441bb3a3f15bfc4183992ba881cbb9e

  • Size

    890KB

  • Sample

    250409-k88wlswlx5

  • MD5

    a441bb3a3f15bfc4183992ba881cbb9e

  • SHA1

    61116f2f5626991cf4b0a76e8394cefbcf94f06a

  • SHA256

    82fc259f004a9099cdbb323d7f01b7054b5bea6df76c3a69b8bf6b86f7993fb5

  • SHA512

    bd2faac7991ee3dc4821e062307fb51ba714adb0ec2099ad1faba667c296c2a28533f550be2d546d16cf619689f8c81bdca4026ef514a1884e322377104ff418

  • SSDEEP

    24576:QA4g0g7aZYTzmUyyRK/cRgOnmq9g6EB36rKX6auehIOcnE:QA4A+inm9zcOU7m64lZuemE

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_a441bb3a3f15bfc4183992ba881cbb9e

    • Size

      890KB

    • MD5

      a441bb3a3f15bfc4183992ba881cbb9e

    • SHA1

      61116f2f5626991cf4b0a76e8394cefbcf94f06a

    • SHA256

      82fc259f004a9099cdbb323d7f01b7054b5bea6df76c3a69b8bf6b86f7993fb5

    • SHA512

      bd2faac7991ee3dc4821e062307fb51ba714adb0ec2099ad1faba667c296c2a28533f550be2d546d16cf619689f8c81bdca4026ef514a1884e322377104ff418

    • SSDEEP

      24576:QA4g0g7aZYTzmUyyRK/cRgOnmq9g6EB36rKX6auehIOcnE:QA4A+inm9zcOU7m64lZuemE

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks