General
-
Target
8b679de54e5842a9ae8c9aac0650675b_JaffaCakes118
-
Size
66KB
-
Sample
241103-pabknstfrr
-
MD5
8b679de54e5842a9ae8c9aac0650675b
-
SHA1
4d2d1f5a67357fc7791ba1e4ab736d2c083726b5
-
SHA256
1ba9e0e680bb0600dd352b879a25b7db298f67af0389dc17a7294e576e631561
-
SHA512
e99feaf79b8b035a86a8dca6a5001ee276305ae80e696ab8d05fcc4a1114776056b70647214232e795297a7598f1eba7d78e3cb5aec0b82723f839832b686dd0
-
SSDEEP
768:I9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJXSTbtFggSl5q:psq+Q1aZQuIyJp0mgA+FJ0+5q
Behavioral task
behavioral1
Sample
8b679de54e5842a9ae8c9aac0650675b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8b679de54e5842a9ae8c9aac0650675b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
loool200.no-ip.org
Targets
-
-
Target
8b679de54e5842a9ae8c9aac0650675b_JaffaCakes118
-
Size
66KB
-
MD5
8b679de54e5842a9ae8c9aac0650675b
-
SHA1
4d2d1f5a67357fc7791ba1e4ab736d2c083726b5
-
SHA256
1ba9e0e680bb0600dd352b879a25b7db298f67af0389dc17a7294e576e631561
-
SHA512
e99feaf79b8b035a86a8dca6a5001ee276305ae80e696ab8d05fcc4a1114776056b70647214232e795297a7598f1eba7d78e3cb5aec0b82723f839832b686dd0
-
SSDEEP
768:I9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJXSTbtFggSl5q:psq+Q1aZQuIyJp0mgA+FJ0+5q
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-