Analysis
- max time kernel
93s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
- submitted
14/07/2024, 15:01
General
- Target 46542d866ba792af067c45cca89e09ee_JaffaCakes118.exe
- Size 155KB
- Sample240714-sd4bmsvgkk
- SHA256 70fb8c21f68b8b73a670367d86078004132ad68ecf3d01b12833dd7b3c8d8728
Malware Config
Signatures
- Detect XtremeRAT payload 1 IoCs
- XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
- Modifies registry class 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\46542d866ba792af067c45cca89e09ee_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\46542d866ba792af067c45cca89e09ee_JaffaCakes118.exe"1⤵
- Modifies registry class
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4416-0-0x0000000000C80000-0x0000000000CF0000-memory.dmp
memory/4416-3-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-14-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-13-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-12-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-11-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-10-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-9-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-8-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-7-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-6-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-5-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-4-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-2-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/4416-1-0x00000000023B0000-0x00000000023B1000-memory.dmp
memory/4416-20-0x00000000023A0000-0x00000000023A1000-memory.dmp
memory/4416-19-0x0000000000C60000-0x0000000000C61000-memory.dmp
memory/4416-18-0x00000000023B0000-0x00000000023B1000-memory.dmp
memory/4416-17-0x00000000023B0000-0x00000000023B1000-memory.dmp
memory/4416-16-0x00000000023B0000-0x00000000023B1000-memory.dmp
memory/4416-15-0x00000000023B0000-0x00000000023B1000-memory.dmp
memory/4416-22-0x0000000000C80000-0x0000000000CF0000-memory.dmp