General
-
Target
171960c0d1d29fbc32a730724c863b88_JaffaCakes118
-
Size
52KB
-
Sample
241005-lbv4xs1gpb
-
MD5
171960c0d1d29fbc32a730724c863b88
-
SHA1
8a63d0ea07b7e05dcbd0c5a898e274e255e31c52
-
SHA256
c22fd335022878e84799ff86fcef6476490db25e039d86cdd0c1414b54bdb0e7
-
SHA512
648c123b2028930018bdff824303f730752e3d74857a687fdd7b522fbc9acd06cd6e37b30a2755a9fe925e1458dc47dce90a3aead96b7c0f6064bf7031e904c1
-
SSDEEP
768:5Wc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcKAS7dSSkJj:Uc9quCDQTwM9By25u3t
Behavioral task
behavioral1
Sample
171960c0d1d29fbc32a730724c863b88_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
171960c0d1d29fbc32a730724c863b88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
xtremerat
daly00.no-ip.biz
Targets
-
-
Target
171960c0d1d29fbc32a730724c863b88_JaffaCakes118
-
Size
52KB
-
MD5
171960c0d1d29fbc32a730724c863b88
-
SHA1
8a63d0ea07b7e05dcbd0c5a898e274e255e31c52
-
SHA256
c22fd335022878e84799ff86fcef6476490db25e039d86cdd0c1414b54bdb0e7
-
SHA512
648c123b2028930018bdff824303f730752e3d74857a687fdd7b522fbc9acd06cd6e37b30a2755a9fe925e1458dc47dce90a3aead96b7c0f6064bf7031e904c1
-
SSDEEP
768:5Wc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcKAS7dSSkJj:Uc9quCDQTwM9By25u3t
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-