Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2b5d2c26f0bc7c986b350b4fbeddcdb3_JaffaCakes118

  • Size

    44KB

  • Sample

    240708-hkbj4axcqm

  • MD5

    2b5d2c26f0bc7c986b350b4fbeddcdb3

  • SHA1

    a6560e196e2bf1d12f83ad2c7a17f39270baa948

  • SHA256

    33fdcd99a322373e1d3b1b62cb1d4d8dacfe3c18e5a8a9d47c6d41b986829e67

  • SHA512

    21496a38e50083e773ef51b015dafdb932aa6b090e10806dd354b55e260519f4f87988b64b96004a0521bb461a596551c38421c155d777cc0290b73d27de7e86

  • SSDEEP

    768:rBr+tjFqTPEAlfztB1lr6anLsGTrOvm2DfuTwYPI+zoJ1L:FyRUnlrL1lr6anTTrOvm2bOQCozL

Malware Config

Extracted

Family

xtremerat

C2

namehost.dyndns.org

Targets

    • Target

      2b5d2c26f0bc7c986b350b4fbeddcdb3_JaffaCakes118

    • Size

      44KB

    • MD5

      2b5d2c26f0bc7c986b350b4fbeddcdb3

    • SHA1

      a6560e196e2bf1d12f83ad2c7a17f39270baa948

    • SHA256

      33fdcd99a322373e1d3b1b62cb1d4d8dacfe3c18e5a8a9d47c6d41b986829e67

    • SHA512

      21496a38e50083e773ef51b015dafdb932aa6b090e10806dd354b55e260519f4f87988b64b96004a0521bb461a596551c38421c155d777cc0290b73d27de7e86

    • SSDEEP

      768:rBr+tjFqTPEAlfztB1lr6anLsGTrOvm2DfuTwYPI+zoJ1L:FyRUnlrL1lr6anTTrOvm2bOQCozL

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks