General
-
Target
JaffaCakes118_2e175e841663f5fd7138833b159bd47e
-
Size
135KB
-
Sample
250113-yk45eawjg1
-
MD5
2e175e841663f5fd7138833b159bd47e
-
SHA1
72b76711821c01697768d682fb37ba6f38db6bc0
-
SHA256
16c16785928ef5752c4c1ead3f5912cdeb894cc9ebfc5ba2a19dd80e85a415c0
-
SHA512
525edc153b8ef362e185e2e124eada48e152e6e3ce0ccc7b6e9da72a9753e23fbd9409a0bc6186744304f7a7e82598a658ff082dd8e24a026b3c0e0ea431aba0
-
SSDEEP
768:ijups9Xmn9Gq3MQvPJrsiTQ0isa6u/g37U5knjxwbsvwK:hiWnw2bxG0is2/1ejMY
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2e175e841663f5fd7138833b159bd47e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2e175e841663f5fd7138833b159bd47e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
avic.zapto.org
Targets
-
-
Target
JaffaCakes118_2e175e841663f5fd7138833b159bd47e
-
Size
135KB
-
MD5
2e175e841663f5fd7138833b159bd47e
-
SHA1
72b76711821c01697768d682fb37ba6f38db6bc0
-
SHA256
16c16785928ef5752c4c1ead3f5912cdeb894cc9ebfc5ba2a19dd80e85a415c0
-
SHA512
525edc153b8ef362e185e2e124eada48e152e6e3ce0ccc7b6e9da72a9753e23fbd9409a0bc6186744304f7a7e82598a658ff082dd8e24a026b3c0e0ea431aba0
-
SSDEEP
768:ijups9Xmn9Gq3MQvPJrsiTQ0isa6u/g37U5knjxwbsvwK:hiWnw2bxG0is2/1ejMY
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-