Overview

overview

10

Static

static

10

25abdd1c63...18.exe

windows7-x64

10

25abdd1c63...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25abdd1c63dd2e2476b96eac0337b88b_JaffaCakes118

  • Size

    40KB

  • Sample

    240704-wcvvna1brk

  • MD5

    25abdd1c63dd2e2476b96eac0337b88b

  • SHA1

    1251bb32e0e37346a102ceafff855850be661302

  • SHA256

    f43d24119beca98876fa35afb979d8f91ca1594daf71615d2e0430f776620344

  • SHA512

    50001516442efd251f583f585b6f9931aadd5dd2b3895758395f96fa8ce9f15ebe7a432480fab20d2499a2bed6e6b362bf5c5a7d93d1bb4f27e68c96a5055811

  • SSDEEP

    768:6E9hJhdN12Ozhiow2Gkm6+Z8/pBzNBwIldGzoWmxC:6uTzMOlw2Gkmb8/BldaoWmxC

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      25abdd1c63dd2e2476b96eac0337b88b_JaffaCakes118

    • Size

      40KB

    • MD5

      25abdd1c63dd2e2476b96eac0337b88b

    • SHA1

      1251bb32e0e37346a102ceafff855850be661302

    • SHA256

      f43d24119beca98876fa35afb979d8f91ca1594daf71615d2e0430f776620344

    • SHA512

      50001516442efd251f583f585b6f9931aadd5dd2b3895758395f96fa8ce9f15ebe7a432480fab20d2499a2bed6e6b362bf5c5a7d93d1bb4f27e68c96a5055811

    • SSDEEP

      768:6E9hJhdN12Ozhiow2Gkm6+Z8/pBzNBwIldGzoWmxC:6uTzMOlw2Gkmb8/BldaoWmxC

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks