General
-
Target
7a8596908d876c76f5a6287179a24083_JaffaCakes118
-
Size
33KB
-
Sample
241028-vkg34asjfw
-
MD5
7a8596908d876c76f5a6287179a24083
-
SHA1
bb2936d048ae0129de8b3014202cf9eab009b81b
-
SHA256
9add98b456cdb58fc5867446cc7c01c0f413b82e1dd39df2572e16d6ca18f021
-
SHA512
89186ac360ebd938c344b06b0e25e5e07c9060fae30795830ae85153e42dbddf7b5578423f1fce93db405b98bc5b651b3f2f32fd061dca09e7b58426c82b08c1
-
SSDEEP
768:jrMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rdN4ZymVBGvOQ:jwNW71rcYDAWeoDrsEud5rdOMZv
Behavioral task
behavioral1
Sample
7a8596908d876c76f5a6287179a24083_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
xtremerat
basoom.no-ip.info
Targets
-
-
Target
7a8596908d876c76f5a6287179a24083_JaffaCakes118
-
Size
33KB
-
MD5
7a8596908d876c76f5a6287179a24083
-
SHA1
bb2936d048ae0129de8b3014202cf9eab009b81b
-
SHA256
9add98b456cdb58fc5867446cc7c01c0f413b82e1dd39df2572e16d6ca18f021
-
SHA512
89186ac360ebd938c344b06b0e25e5e07c9060fae30795830ae85153e42dbddf7b5578423f1fce93db405b98bc5b651b3f2f32fd061dca09e7b58426c82b08c1
-
SSDEEP
768:jrMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rdN4ZymVBGvOQ:jwNW71rcYDAWeoDrsEud5rdOMZv
-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-