Analysis
-
max time kernel
94s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
31-01-2025 18:42
General
-
Target
JaffaCakes118_6cf8860219a74ea603ab42d7925b4d6a.exe
-
Size
40KB
-
MD5
6cf8860219a74ea603ab42d7925b4d6a
-
SHA1
187f23e141c8e89c5156933d2794412426e0450a
-
SHA256
3a6bf1e89164b240d5dbe0b0e85595f715b47c3ac632736e223acbc2ced2e679
-
SHA512
b3f1a2b335454d8c887bd4c361006bd9dd80ccda6ff3c778f50c6089268a8fa3ada598d066b88798ab4087039eb067928d5737b9c15058645aad5d50a12ada77
-
SSDEEP
768:SE7hghdN12Ozhiow2GkmFjf3/pBzNBwIldCzoc:S8+zMOlw2GkmR3/Blduoc
Score
10/10
Malware Config
Signatures
-
Detect XtremeRAT payload 1 IoCs
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6cf8860219a74ea603ab42d7925b4d6a.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6cf8860219a74ea603ab42d7925b4d6a.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB