Overview

overview

10

Static

static

10

JaffaCakes...1e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b63971b63fe4c1ba3cbcb3c1c95a631e

  • Size

    65KB

  • Sample

    250414-bj662swns6

  • MD5

    b63971b63fe4c1ba3cbcb3c1c95a631e

  • SHA1

    d035c9ce61351e8f0de5948e93090e53caf41404

  • SHA256

    316807eb3b8d99e4022b138f759e8bb036e4821be7f71204c4a5a2b5b89f5b7c

  • SHA512

    37248fe5ffa740aff88e7d3f01aeeb9dc0ae6a65d55e4b27c534e734fb326661ac1797237d1a9bfe0fe3e550b69af7be4085fa4f97c4bb263fe47aa9d4ccc2a6

  • SSDEEP

    768:w8m1Sq4NQ0rBsH19zoisBRQI6dObAG/dq8uW29IfncK/yyR+P29jfwipKPAu7Xon:ysq+QF/rObAdXWpfvyHrojNwif1z

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_b63971b63fe4c1ba3cbcb3c1c95a631e

    • Size

      65KB

    • MD5

      b63971b63fe4c1ba3cbcb3c1c95a631e

    • SHA1

      d035c9ce61351e8f0de5948e93090e53caf41404

    • SHA256

      316807eb3b8d99e4022b138f759e8bb036e4821be7f71204c4a5a2b5b89f5b7c

    • SHA512

      37248fe5ffa740aff88e7d3f01aeeb9dc0ae6a65d55e4b27c534e734fb326661ac1797237d1a9bfe0fe3e550b69af7be4085fa4f97c4bb263fe47aa9d4ccc2a6

    • SSDEEP

      768:w8m1Sq4NQ0rBsH19zoisBRQI6dObAG/dq8uW29IfncK/yyR+P29jfwipKPAu7Xon:ysq+QF/rObAdXWpfvyHrojNwif1z

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks