General
-
Target
e57c00d3d2c896f3300f6f7d1390a0a4_JaffaCakes118
-
Size
62KB
-
Sample
241212-j7g6tszqhl
-
MD5
e57c00d3d2c896f3300f6f7d1390a0a4
-
SHA1
698145e483d1b2602ec2ee6f82d35868a16cffee
-
SHA256
772a48e3f36ee2dc9fb03e975b793f4aa5a2cac696c195afdd0c90c25b5034bb
-
SHA512
bc5b6ffa0c021d2b097039411225ef07f3016746005a22a6dabd2f30b7bc97b9a84e5791141734312b1815454c7c4177c74da05e8baaf6dd1e036fef11f0f89d
-
SSDEEP
1536:fT8qDqQMK9MK3tGjbNwPZ6oAXHWTl5NX3Q:LqcyKdcZXHW5s
Behavioral task
behavioral1
Sample
e57c00d3d2c896f3300f6f7d1390a0a4_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
e57c00d3d2c896f3300f6f7d1390a0a4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
11hack11.no-ip.biz
11hack1.no-ip.biz
䪤焙.jouba.no-ip.biz
Targets
-
-
Target
e57c00d3d2c896f3300f6f7d1390a0a4_JaffaCakes118
-
Size
62KB
-
MD5
e57c00d3d2c896f3300f6f7d1390a0a4
-
SHA1
698145e483d1b2602ec2ee6f82d35868a16cffee
-
SHA256
772a48e3f36ee2dc9fb03e975b793f4aa5a2cac696c195afdd0c90c25b5034bb
-
SHA512
bc5b6ffa0c021d2b097039411225ef07f3016746005a22a6dabd2f30b7bc97b9a84e5791141734312b1815454c7c4177c74da05e8baaf6dd1e036fef11f0f89d
-
SSDEEP
1536:fT8qDqQMK9MK3tGjbNwPZ6oAXHWTl5NX3Q:LqcyKdcZXHW5s
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-