General
-
Target
e74be125c1a67eada090a9b6a48d293f_JaffaCakes118
-
Size
65KB
-
Sample
240408-myx3gafd78
-
MD5
e74be125c1a67eada090a9b6a48d293f
-
SHA1
335b33abcdb9af299dcdd4741ef007b9144db57c
-
SHA256
0a3a0972ce286fd35c23569ccc930d6912e4152e44e170d42c1a4686963bd31f
-
SHA512
b54028f2d85c6820895bdd8c5b18fada3b73f897c30579c5fe08cce1396e7e6f7c41d91c18b95d798b34ae371072fa5d90194fa8d99e7afcabd1d436a6485deb
-
SSDEEP
768:E9m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNwqXSAHUp:lsq+QI6ZQuIyJh0mgA+FW0gNwEi
Behavioral task
behavioral1
Sample
e74be125c1a67eada090a9b6a48d293f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e74be125c1a67eada090a9b6a48d293f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
xtremerat
a323.no-ip.biz
Targets
-
-
Target
e74be125c1a67eada090a9b6a48d293f_JaffaCakes118
-
Size
65KB
-
MD5
e74be125c1a67eada090a9b6a48d293f
-
SHA1
335b33abcdb9af299dcdd4741ef007b9144db57c
-
SHA256
0a3a0972ce286fd35c23569ccc930d6912e4152e44e170d42c1a4686963bd31f
-
SHA512
b54028f2d85c6820895bdd8c5b18fada3b73f897c30579c5fe08cce1396e7e6f7c41d91c18b95d798b34ae371072fa5d90194fa8d99e7afcabd1d436a6485deb
-
SSDEEP
768:E9m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNwqXSAHUp:lsq+QI6ZQuIyJh0mgA+FW0gNwEi
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-