Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07-12-2024 00:43
Behavioral task
behavioral1
Sample
cfd8ebf7e4fcb68ff1259b1eaa6b9862_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfd8ebf7e4fcb68ff1259b1eaa6b9862_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cfd8ebf7e4fcb68ff1259b1eaa6b9862_JaffaCakes118.exe
-
Size
81KB
-
MD5
cfd8ebf7e4fcb68ff1259b1eaa6b9862
-
SHA1
01c28f97dccc51b571b5f1eaef5886c5c28432e8
-
SHA256
86cae1945995cd1266811a8495f10719374782ddeed466550c0722ad107b1b5f
-
SHA512
2a2b52987e25ac11acce28d9a9724e63070839210cea988088325f40cc1dec74273df6831e2a5ea407bf6a53414ffbe3bb2ba71b14adbc438fe329e75899f5d6
-
SSDEEP
1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHW7l5NX3RfEfE:DqMyKdcPeXHWR1cs
Malware Config
Signatures
-
Detect XtremeRAT payload 1 IoCs
resource yara_rule behavioral1/memory/2148-0-0x0000000010000000-0x000000001004C000-memory.dmp family_xtremerat -
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family