General
-
Target
756cb353f3bb83dd2317950dc0b0fb23_JaffaCakes118
-
Size
65KB
-
Sample
240526-n9t1maah2x
-
MD5
756cb353f3bb83dd2317950dc0b0fb23
-
SHA1
39d60b97cf045e9462921fb63248f6d0bddb8b7f
-
SHA256
e6123e02a34b7b2668832cdd15c5945f7ec2825003865f0d09d98152f2be1a1d
-
SHA512
d0d9ab55b2e5b06f098867b1d2883ce78b9d18d46a0289450d6252676ebd150226880dc84137793e93373af146462d420534d52643bd7914431111204fb9a076
-
SSDEEP
768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8HOzJ:esq+QV4rObAdXWpf/y+YaSom
Behavioral task
behavioral1
Sample
756cb353f3bb83dd2317950dc0b0fb23_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
756cb353f3bb83dd2317950dc0b0fb23_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
xtremerat
mesn.no-ip.biz
Targets
-
-
Target
756cb353f3bb83dd2317950dc0b0fb23_JaffaCakes118
-
Size
65KB
-
MD5
756cb353f3bb83dd2317950dc0b0fb23
-
SHA1
39d60b97cf045e9462921fb63248f6d0bddb8b7f
-
SHA256
e6123e02a34b7b2668832cdd15c5945f7ec2825003865f0d09d98152f2be1a1d
-
SHA512
d0d9ab55b2e5b06f098867b1d2883ce78b9d18d46a0289450d6252676ebd150226880dc84137793e93373af146462d420534d52643bd7914431111204fb9a076
-
SSDEEP
768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8HOzJ:esq+QV4rObAdXWpf/y+YaSom
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-