General
-
Target
JaffaCakes118_0344d597de11cce27cfe8275067ae7c5
-
Size
37KB
-
Sample
250121-ka77esvnby
-
MD5
0344d597de11cce27cfe8275067ae7c5
-
SHA1
2d7411309129a51d8e6b59e60476f52445b90cba
-
SHA256
16bf391f2e74d45caeab7f3b35434f8fa57150d6d25443dd005468a1da0fc677
-
SHA512
bd970c97280994b6479f069c399ee104e3fe520581f679a3862b3a56444e19331c1d05f65b8101299f813363d932a95be29fff7373a664a04374722e0ddc55c7
-
SSDEEP
768:HbA+7z6fLKh1PhbGa31V3m0C4NDySxN27KD917+Mf0qJG+Jx5LoI:HbSezpzV3rCqDyl7K77H0qJz
Behavioral task
behavioral1
Sample
JaffaCakes118_0344d597de11cce27cfe8275067ae7c5.exe
Resource
win7-20241010-en
Malware Config
Extracted
xtremerat
koko009.tzo.net
Targets
-
-
Target
JaffaCakes118_0344d597de11cce27cfe8275067ae7c5
-
Size
37KB
-
MD5
0344d597de11cce27cfe8275067ae7c5
-
SHA1
2d7411309129a51d8e6b59e60476f52445b90cba
-
SHA256
16bf391f2e74d45caeab7f3b35434f8fa57150d6d25443dd005468a1da0fc677
-
SHA512
bd970c97280994b6479f069c399ee104e3fe520581f679a3862b3a56444e19331c1d05f65b8101299f813363d932a95be29fff7373a664a04374722e0ddc55c7
-
SSDEEP
768:HbA+7z6fLKh1PhbGa31V3m0C4NDySxN27KD917+Mf0qJG+Jx5LoI:HbSezpzV3rCqDyl7K77H0qJz
-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-