General
-
Target
ca92e024b236ed9f4b33a45b6ffc07de_JaffaCakes118
-
Size
203KB
-
Sample
241206-cvj2bs1mcl
-
MD5
ca92e024b236ed9f4b33a45b6ffc07de
-
SHA1
862712c62cd222b9557952e5973c2a1f34408979
-
SHA256
a8f72104f6e4504f00819d985ce00ff25fb3cba59f8e914b1caff95a00a6f9cc
-
SHA512
845c5688972e6c767788987170ac35e4560bf2d7679fed68caeaa0d3a70edfacef7cb67bb44502a91a8f65f3a83a4d9185db79e2abbb5a9c57620ad2230c637b
-
SSDEEP
3072:uVTnDM0c1QzEFXmIh9hpwkBXnuUCM1RzOQHxLCX0u1H4jOpCHWPSvz9L9T6mvyb9:ETBc1Q6my73uUCrQH84H6mohDz
Static task
static1
Behavioral task
behavioral1
Sample
ca92e024b236ed9f4b33a45b6ffc07de_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ca92e024b236ed9f4b33a45b6ffc07de_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
ca92e024b236ed9f4b33a45b6ffc07de_JaffaCakes118
-
Size
203KB
-
MD5
ca92e024b236ed9f4b33a45b6ffc07de
-
SHA1
862712c62cd222b9557952e5973c2a1f34408979
-
SHA256
a8f72104f6e4504f00819d985ce00ff25fb3cba59f8e914b1caff95a00a6f9cc
-
SHA512
845c5688972e6c767788987170ac35e4560bf2d7679fed68caeaa0d3a70edfacef7cb67bb44502a91a8f65f3a83a4d9185db79e2abbb5a9c57620ad2230c637b
-
SSDEEP
3072:uVTnDM0c1QzEFXmIh9hpwkBXnuUCM1RzOQHxLCX0u1H4jOpCHWPSvz9L9T6mvyb9:ETBc1Q6my73uUCrQH84H6mohDz
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-
Suspicious use of SetThreadContext
-