General
-
Target
b0d3f787862689806861232beb1f9eab_JaffaCakes118
-
Size
62KB
-
Sample
241129-m6n5jawrfl
-
MD5
b0d3f787862689806861232beb1f9eab
-
SHA1
3f5d02b8f96b69f3093655eb66d40fb8cc2b396e
-
SHA256
f48162bcc42ee49a7a7f88e9c862b4912ba540c9741e568db892d3142b51e1bf
-
SHA512
e1279a12dd7bab347c8fb70675d2dcadbaca82943b877ce2185055173d82754d537f86d34c7d83323033388100001108b5306b5f903f97234098084f8db98086
-
SSDEEP
1536:OT8qDqQdUgMK3tGjbNwPZ6dIeXHWzl5NX35:sqLXKdcQeXHWZ1
Behavioral task
behavioral1
Sample
b0d3f787862689806861232beb1f9eab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b0d3f787862689806861232beb1f9eab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
blackdevil2011.no-ip.biz
Targets
-
-
Target
b0d3f787862689806861232beb1f9eab_JaffaCakes118
-
Size
62KB
-
MD5
b0d3f787862689806861232beb1f9eab
-
SHA1
3f5d02b8f96b69f3093655eb66d40fb8cc2b396e
-
SHA256
f48162bcc42ee49a7a7f88e9c862b4912ba540c9741e568db892d3142b51e1bf
-
SHA512
e1279a12dd7bab347c8fb70675d2dcadbaca82943b877ce2185055173d82754d537f86d34c7d83323033388100001108b5306b5f903f97234098084f8db98086
-
SSDEEP
1536:OT8qDqQdUgMK3tGjbNwPZ6dIeXHWzl5NX35:sqLXKdcQeXHWZ1
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-