Overview

overview

10

Static

static

10

JaffaCakes...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b7cb6f6602089f7adc45eca7558c14a0

  • Size

    40KB

  • Sample

    250414-p2bpraywcw

  • MD5

    b7cb6f6602089f7adc45eca7558c14a0

  • SHA1

    081615094b7b3a97b194d1ed9ca81b4ec0b84d7f

  • SHA256

    960f6d520681bbce702b5329636642c148d7d427182a165feaf90538c01e0961

  • SHA512

    37aa4a876add8d8d7847063e58c338779bbdaa6d136d834b7523ae34ee3b7c1027bae898acf8edbfd5e753dbc6fbf33fe8d4efdf061b1e82e230d9d356f8a8d7

  • SSDEEP

    768:SEuhghdN12Ozhiow2GkmFjf3/pBzNBwIldCzoc:Sp+zMOlw2GkmR3/Blduoc

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_b7cb6f6602089f7adc45eca7558c14a0

    • Size

      40KB

    • MD5

      b7cb6f6602089f7adc45eca7558c14a0

    • SHA1

      081615094b7b3a97b194d1ed9ca81b4ec0b84d7f

    • SHA256

      960f6d520681bbce702b5329636642c148d7d427182a165feaf90538c01e0961

    • SHA512

      37aa4a876add8d8d7847063e58c338779bbdaa6d136d834b7523ae34ee3b7c1027bae898acf8edbfd5e753dbc6fbf33fe8d4efdf061b1e82e230d9d356f8a8d7

    • SSDEEP

      768:SEuhghdN12Ozhiow2GkmFjf3/pBzNBwIldCzoc:Sp+zMOlw2GkmR3/Blduoc

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks