General
-
Target
5c6f56a579c01486142b110db4ffc429_JaffaCakes118
-
Size
65KB
-
Sample
241019-nqwecawckp
-
MD5
5c6f56a579c01486142b110db4ffc429
-
SHA1
9848bec4adfe6186795c14b943f57207eb389131
-
SHA256
8b5a2fb7015424bc6ba3089c13f8612177555c67bb81a117e41dc916e4a51a1d
-
SHA512
5c844e50f2bae214f113efc2b4377df1b6cd9472bc347791fedfdee6c59ddf02963b71a1098979a8a083aecf48fa0708b6abecd2ac7cedbea0263f1fb97b2cfb
-
SSDEEP
768:jlm1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifncm/yyR+P2ujfGiWqfA+7XoG:8sq+QV4rObAdXWpfzy+c4zNwi8F
Behavioral task
behavioral1
Sample
5c6f56a579c01486142b110db4ffc429_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5c6f56a579c01486142b110db4ffc429_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
hamadah.no-ip.biz
hamadah.zapto.org
Targets
-
-
Target
5c6f56a579c01486142b110db4ffc429_JaffaCakes118
-
Size
65KB
-
MD5
5c6f56a579c01486142b110db4ffc429
-
SHA1
9848bec4adfe6186795c14b943f57207eb389131
-
SHA256
8b5a2fb7015424bc6ba3089c13f8612177555c67bb81a117e41dc916e4a51a1d
-
SHA512
5c844e50f2bae214f113efc2b4377df1b6cd9472bc347791fedfdee6c59ddf02963b71a1098979a8a083aecf48fa0708b6abecd2ac7cedbea0263f1fb97b2cfb
-
SSDEEP
768:jlm1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifncm/yyR+P2ujfGiWqfA+7XoG:8sq+QV4rObAdXWpfzy+c4zNwi8F
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-