Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:12
Behavioral task
behavioral1
Sample
ffdde495c733ffcf4a235105629bf0be_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffdde495c733ffcf4a235105629bf0be_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffdde495c733ffcf4a235105629bf0be_JaffaCakes118.exe
-
Size
62KB
-
MD5
ffdde495c733ffcf4a235105629bf0be
-
SHA1
872ae95d9530b21b39b17c20089931f8161266d2
-
SHA256
f36dea341530dfbff64b82cfb4afc0b2e369bb6098eac37cdb7976bd134964f9
-
SHA512
4b1b9501105eb669159460064dddaef951da6850d92620bcee6f1a4846f6aa982e7059e678a9ca027bfdd29ebce7375bb1e68bbdc0666757174ea4def9215a14
-
SSDEEP
1536:j8qDqQMKgMK3t/jbNwPZ6ZAeXHWwleNX3G:jqcXKd/geXHWeD
Malware Config
Signatures
-
Detect XtremeRAT payload 1 IoCs
Processes:
resource yara_rule behavioral1/memory/2784-0-0x0000000010000000-0x0000000010047000-memory.dmp family_xtremerat -
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2784-0-0x0000000010000000-0x0000000010047000-memory.dmpFilesize
284KB