General
-
Target
ee2865688c35a9f8809b9c06f3b86ef2_JaffaCakes118
-
Size
65KB
-
Sample
240411-x16gqsdh8s
-
MD5
ee2865688c35a9f8809b9c06f3b86ef2
-
SHA1
6c203a4cbb7b8e5027cbf449e5348db302f6d1d2
-
SHA256
a2ade97ee2e86f17b32e46ee5a9f990419ff66578482e733913375fc2d738a83
-
SHA512
5bc7c598af548a59c09eabeaa125ea240403ded4ed83750458960a9816c17866969ed07b1d26618be079e1c0c21a74eec38a2509eb8cd174a71c806f67534988
-
SSDEEP
768:I3m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNw4/Kcw:Xsq+QI6ZQuIyJh0mgA+FW0gNw1
Behavioral task
behavioral1
Sample
ee2865688c35a9f8809b9c06f3b86ef2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ee2865688c35a9f8809b9c06f3b86ef2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
xtremerat
a323.no-ip.biz
Targets
-
-
Target
ee2865688c35a9f8809b9c06f3b86ef2_JaffaCakes118
-
Size
65KB
-
MD5
ee2865688c35a9f8809b9c06f3b86ef2
-
SHA1
6c203a4cbb7b8e5027cbf449e5348db302f6d1d2
-
SHA256
a2ade97ee2e86f17b32e46ee5a9f990419ff66578482e733913375fc2d738a83
-
SHA512
5bc7c598af548a59c09eabeaa125ea240403ded4ed83750458960a9816c17866969ed07b1d26618be079e1c0c21a74eec38a2509eb8cd174a71c806f67534988
-
SSDEEP
768:I3m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNw4/Kcw:Xsq+QI6ZQuIyJh0mgA+FW0gNw1
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-