General
-
Target
fdbdb2519c54bbcbc97e3fdb8e4f2424_JaffaCakes118
-
Size
131KB
-
Sample
240929-ednz3a1glb
-
MD5
fdbdb2519c54bbcbc97e3fdb8e4f2424
-
SHA1
ec53fdb37ce15a6584e22d5fa220d42491f56860
-
SHA256
8dda55117f705b4ee04b8baa4ffb272edd075bc7fa233b042892465958f156b0
-
SHA512
aaf0d440ccd85e212480e90262a7e064eca56d983e0b9d33be98222a6d8fa4f2d84061e80317f269ce8f63fa074ebb3788d0049fe1c380ad8de044425e689410
-
SSDEEP
1536:Tsq+QV4rObAdXWpf/y+YaAG4Rd6t3WcQ6G4Rd6t3WcQY:e44rj/laGRd6p2sRd6p2Y
Behavioral task
behavioral1
Sample
fdbdb2519c54bbcbc97e3fdb8e4f2424_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdbdb2519c54bbcbc97e3fdb8e4f2424_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
xtremerat
cheezhack.no-ip.org
Ÿ末效扈晈cheezhack.no-ip.org
Targets
-
-
Target
fdbdb2519c54bbcbc97e3fdb8e4f2424_JaffaCakes118
-
Size
131KB
-
MD5
fdbdb2519c54bbcbc97e3fdb8e4f2424
-
SHA1
ec53fdb37ce15a6584e22d5fa220d42491f56860
-
SHA256
8dda55117f705b4ee04b8baa4ffb272edd075bc7fa233b042892465958f156b0
-
SHA512
aaf0d440ccd85e212480e90262a7e064eca56d983e0b9d33be98222a6d8fa4f2d84061e80317f269ce8f63fa074ebb3788d0049fe1c380ad8de044425e689410
-
SSDEEP
1536:Tsq+QV4rObAdXWpf/y+YaAG4Rd6t3WcQ6G4Rd6t3WcQY:e44rj/laGRd6p2sRd6p2Y
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-