Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19-10-2024 22:41
Behavioral task
behavioral1
Sample
5f08eaa1825e88326de950d155aa9729_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f08eaa1825e88326de950d155aa9729_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5f08eaa1825e88326de950d155aa9729_JaffaCakes118.exe
-
Size
81KB
-
MD5
5f08eaa1825e88326de950d155aa9729
-
SHA1
798d9449f44611d3e1cae50b1be6eb426449d74e
-
SHA256
7dca8ecb431a4e7c759c7ceb69f5e53ddb91876577b10be74720b202cbc30e01
-
SHA512
d4fa3a4dc31847243cf2d9f4b25eb390d3383b8f30335d71ac7e8be0a700a0fc7490bec11381cc57fd636a8b6e8d505a015760545e3311265c2c6e103f82564c
-
SSDEEP
1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWWl5NX3RfEfE:DqMyKdcPeXHWI1cs
Malware Config
Extracted
xtremerat
esam2at.no-ip.biz
Signatures
-
Detect XtremeRAT payload 1 IoCs
resource yara_rule behavioral1/memory/2068-0-0x0000000010000000-0x000000001004C000-memory.dmp family_xtremerat -
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.