General
-
Target
bc551d3cb16f3a1318c06551ff6d1534_JaffaCakes118
-
Size
65KB
-
Sample
240823-s1aylssfjc
-
MD5
bc551d3cb16f3a1318c06551ff6d1534
-
SHA1
500d0477a89df8d260230c6c095e47ac55552047
-
SHA256
709ab2195aca3686e84d93dbc1b9d36f8b12f3b75e45f274fc0cec086e0adb07
-
SHA512
172fd6bd942e94166e403bf8cc8f4af65024f9351234fbafc5350ce8aa7c9b368c7d2d8d83dae99dae3b9e28307e50a03b5b552ea4455bc35b3108a421dd6716
-
SSDEEP
768:E9m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNwqXSAHUp:lsq+QI6ZQuIyJh0mgA+FW0gNwEi
Behavioral task
behavioral1
Sample
bc551d3cb16f3a1318c06551ff6d1534_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc551d3cb16f3a1318c06551ff6d1534_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
xtremerat
a323.no-ip.biz
Targets
-
-
Target
bc551d3cb16f3a1318c06551ff6d1534_JaffaCakes118
-
Size
65KB
-
MD5
bc551d3cb16f3a1318c06551ff6d1534
-
SHA1
500d0477a89df8d260230c6c095e47ac55552047
-
SHA256
709ab2195aca3686e84d93dbc1b9d36f8b12f3b75e45f274fc0cec086e0adb07
-
SHA512
172fd6bd942e94166e403bf8cc8f4af65024f9351234fbafc5350ce8aa7c9b368c7d2d8d83dae99dae3b9e28307e50a03b5b552ea4455bc35b3108a421dd6716
-
SSDEEP
768:E9m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNwqXSAHUp:lsq+QI6ZQuIyJh0mgA+FW0gNwEi
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-