Analysis
-
max time kernel
98s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
22-02-2025 00:28
General
-
Target
JaffaCakes118_1625972e82c4f1bba23c05979a47ddbf.exe
-
Size
44KB
-
MD5
1625972e82c4f1bba23c05979a47ddbf
-
SHA1
2c1b938a6d7886651a78cdae11137205691b45fd
-
SHA256
3b5d079ff3adee2b89ef5e1c03b7ca4eae46082e40685e70661c928b4063d48e
-
SHA512
eb5bef3bac8bc2f3785dc0bbef3f8e6265af1f899cd7a9dc7f06d40ab70b9e2bf4422429e7cfc264adcf6d65c2b61d4cc657061c082fc45556eea8394f12a325
-
SSDEEP
768:rBr+tjFKTPkAlfztO1lr6anXsGzZcUvm24fOTwYPI5zoi98BJ:FyR0HlrE1lr6an3zKUvm2yuQRoDBJ
Score
10/10
Malware Config
Signatures
-
Detect XtremeRAT payload 1 IoCs
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1625972e82c4f1bba23c05979a47ddbf.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1625972e82c4f1bba23c05979a47ddbf.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB