Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 15:07
Behavioral task
behavioral1
Sample
5c776eb10881da5ec013792d9c1d94ff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c776eb10881da5ec013792d9c1d94ff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c776eb10881da5ec013792d9c1d94ff_JaffaCakes118.exe
-
Size
44KB
-
MD5
5c776eb10881da5ec013792d9c1d94ff
-
SHA1
0c5fea35384922728893a796ceb2ec623dc37148
-
SHA256
13edbf79451a0e4854305615113144344ec3d77dbb16fdfec8c37aa16775c9ec
-
SHA512
38454f34738f97f28154dc049c82f2f4b89c15feb0e81c535202dad5e91a112cd5ccf1b8725f69f74c0bf4eb0cc1ace3a011e9b867d9a810623ac55970f4dff5
-
SSDEEP
768:rBr+tjFqTPkAlfztB1lr6an3smTA8uvm2DfOTwYPIkzoiQ:FyRUHlrL1lr6an3TLuvm2buQkoiQ
Malware Config
Extracted
xtremerat
namehost.dyndns.org
Signatures
-
Detect XtremeRAT payload 1 IoCs
resource yara_rule behavioral1/memory/2084-0-0x0000000000C80000-0x0000000000C93000-memory.dmp family_xtremerat -
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.