Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
18-10-2024 10:44
General
-
Target
56fee5e91cca1f2afe4f8f120449e585_JaffaCakes118.exe
-
Size
57KB
-
MD5
56fee5e91cca1f2afe4f8f120449e585
-
SHA1
45464d188df54a8cf8b69adc44821738bb60cbbd
-
SHA256
69423f03f3787c0375adbb2887be60d8359f6f1f9964b855de859f5099f8959f
-
SHA512
19027b52daf0789e9cdf1de450c9e2c0cb186d12280cc8626248c76f0fd1caae45e2d1e33392838d23387e23c020b915677db1596794403b0d1fb42c44196c3d
-
SSDEEP
1536:kT8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3:KqMyKdcPeXHW5
Score
10/10
Malware Config
Signatures
-
Detect XtremeRAT payload 9 IoCs
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\56fee5e91cca1f2afe4f8f120449e585_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\56fee5e91cca1f2afe4f8f120449e585_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB