General
-
Target
3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118
-
Size
57KB
-
Sample
240712-15w1msvdpe
-
MD5
3f1506d06bbcf08b7c87137e7b4f4ca1
-
SHA1
cd9cd51d1313506e9310b3e747242f0f79eb2b16
-
SHA256
343ed8c7dbddc66528a7422a79ea4dec38a056191a1c2885aa9c334280868652
-
SHA512
6a0abb751616773390d9af7235b9cf04f7199afff39310c4c62960baf14dfc180d21ad1654c43d18213a4cac4fdd90ba7bbc4d8ce41983b7a192f2a48c0bb4df
-
SSDEEP
768:nWdSNNr00g7KnPBRYxjUthS/6GkNJqWTqSruod5BqeqrLPaHVAL4Vi/rDIuRIhT6:ntTpJnPEjGsiHNVTqSrA060+tNT
Static task
static1
Behavioral task
behavioral1
Sample
3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118
-
Size
57KB
-
MD5
3f1506d06bbcf08b7c87137e7b4f4ca1
-
SHA1
cd9cd51d1313506e9310b3e747242f0f79eb2b16
-
SHA256
343ed8c7dbddc66528a7422a79ea4dec38a056191a1c2885aa9c334280868652
-
SHA512
6a0abb751616773390d9af7235b9cf04f7199afff39310c4c62960baf14dfc180d21ad1654c43d18213a4cac4fdd90ba7bbc4d8ce41983b7a192f2a48c0bb4df
-
SSDEEP
768:nWdSNNr00g7KnPBRYxjUthS/6GkNJqWTqSruod5BqeqrLPaHVAL4Vi/rDIuRIhT6:ntTpJnPEjGsiHNVTqSrA060+tNT
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Suspicious use of SetThreadContext
-