Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
- submitted
08/07/2024, 22:56
General
- Target 2e209ec75b25601d27ee57b78d12cb47_JaffaCakes118.exe
- Size 81KB
- Sample240708-2wvlwswbkd
- SHA256 da542a1b987277bd82908b56e13737790f5f16acc1c3578f5dcb50488abbb6c8
Score
10/10
Malware Config
Signatures
- Detect XtremeRAT payload 2 IoCs
- XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e209ec75b25601d27ee57b78d12cb47_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2e209ec75b25601d27ee57b78d12cb47_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3488-0-0x0000000000C80000-0x0000000000C96000-memory.dmp
memory/3488-1-0x0000000000C80000-0x0000000000C96000-memory.dmp