Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...ff.exe

windows7-x64

10

JaffaCakes...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_271d3e7b5221592960fd61628be6c4ff

  • Size

    65KB

  • Sample

    250125-b18q7szqer

  • MD5

    271d3e7b5221592960fd61628be6c4ff

  • SHA1

    f5b5c1e6a89272f7127dbe8a111089ae653d8ead

  • SHA256

    610868c139f0e41068d0f76e8043d295d6bc07cbc13a0faa5ff688a1952a41c6

  • SHA512

    5c92e6c2b1fbc47acc81b43b63fb7198fdce1797d53a8c79e075356e333fa618042e73341b82a78e479682d5c10c7505e37d93706620e204de912e252ff4e957

  • SSDEEP

    768:e8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY0pYKnA+7PoNwwzF:ssq+QV4rObAdNoAf5UqiYmlArNwYoOyS

Score
10/10
xtremeratdiscoverypersistenceratspyware

Malware Config

Targets

    • Target

      JaffaCakes118_271d3e7b5221592960fd61628be6c4ff

    • Size

      65KB

    • MD5

      271d3e7b5221592960fd61628be6c4ff

    • SHA1

      f5b5c1e6a89272f7127dbe8a111089ae653d8ead

    • SHA256

      610868c139f0e41068d0f76e8043d295d6bc07cbc13a0faa5ff688a1952a41c6

    • SHA512

      5c92e6c2b1fbc47acc81b43b63fb7198fdce1797d53a8c79e075356e333fa618042e73341b82a78e479682d5c10c7505e37d93706620e204de912e252ff4e957

    • SSDEEP

      768:e8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY0pYKnA+7PoNwwzF:ssq+QV4rObAdNoAf5UqiYmlArNwYoOyS

    Score
    10/10
    xtremeratdiscoverypersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks