General
-
Target
5f08eaa1825e88326de950d155aa9729_JaffaCakes118
-
Size
81KB
-
Sample
241019-2l7tgavhlj
-
MD5
5f08eaa1825e88326de950d155aa9729
-
SHA1
798d9449f44611d3e1cae50b1be6eb426449d74e
-
SHA256
7dca8ecb431a4e7c759c7ceb69f5e53ddb91876577b10be74720b202cbc30e01
-
SHA512
d4fa3a4dc31847243cf2d9f4b25eb390d3383b8f30335d71ac7e8be0a700a0fc7490bec11381cc57fd636a8b6e8d505a015760545e3311265c2c6e103f82564c
-
SSDEEP
1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWWl5NX3RfEfE:DqMyKdcPeXHWI1cs
Behavioral task
behavioral1
Sample
5f08eaa1825e88326de950d155aa9729_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f08eaa1825e88326de950d155aa9729_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
esam2at.no-ip.biz
Targets
-
-
Target
5f08eaa1825e88326de950d155aa9729_JaffaCakes118
-
Size
81KB
-
MD5
5f08eaa1825e88326de950d155aa9729
-
SHA1
798d9449f44611d3e1cae50b1be6eb426449d74e
-
SHA256
7dca8ecb431a4e7c759c7ceb69f5e53ddb91876577b10be74720b202cbc30e01
-
SHA512
d4fa3a4dc31847243cf2d9f4b25eb390d3383b8f30335d71ac7e8be0a700a0fc7490bec11381cc57fd636a8b6e8d505a015760545e3311265c2c6e103f82564c
-
SSDEEP
1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWWl5NX3RfEfE:DqMyKdcPeXHWI1cs
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-