Overview

overview

10

Static

static

10

JaffaCakes...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a5d0ccd6d5117a346066a18f11baf35c

  • Size

    75KB

  • Sample

    250409-tx94zawpy4

  • MD5

    a5d0ccd6d5117a346066a18f11baf35c

  • SHA1

    fa2f6c933969a52b37efc6286fe35ab8d3fdfff1

  • SHA256

    8f7e89962453260df63e4b9d3bcd5cbcb6451581e37d0db1a34eaf3f19d12d40

  • SHA512

    ced450f8236765b355906745550a5a75120e6619d3ef36f5de64ff55322bd1835d0d42117d24fe766b3adaf260ef72161394bbf3bf7b0bd9daf1c7a8429e0759

  • SSDEEP

    768:D8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8l8/x:7sq+QV4rObAdXWpf/y+YaleXo

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_a5d0ccd6d5117a346066a18f11baf35c

    • Size

      75KB

    • MD5

      a5d0ccd6d5117a346066a18f11baf35c

    • SHA1

      fa2f6c933969a52b37efc6286fe35ab8d3fdfff1

    • SHA256

      8f7e89962453260df63e4b9d3bcd5cbcb6451581e37d0db1a34eaf3f19d12d40

    • SHA512

      ced450f8236765b355906745550a5a75120e6619d3ef36f5de64ff55322bd1835d0d42117d24fe766b3adaf260ef72161394bbf3bf7b0bd9daf1c7a8429e0759

    • SSDEEP

      768:D8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8l8/x:7sq+QV4rObAdXWpf/y+YaleXo

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks