Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_70c4846da016989877ad76b2716a1d75

  • Size

    153KB

  • Sample

    250313-qp978awnz7

  • MD5

    70c4846da016989877ad76b2716a1d75

  • SHA1

    940172b00f78c80d1d29f3a4e368394b073bfff5

  • SHA256

    1e8de216803ac3f4102291bc7967f324097aa4081ba484c327f9484f48564d54

  • SHA512

    2b9249f1136884a5bb7def55d5d9ce35a886508cf98105c161cd6f62da6a02704734c54769ea9c95994cd465a02df5b5c7785d4aa43d76e9aec3f2d986094283

  • SSDEEP

    3072:DNsSLXeWz++ho0u6kmPAcSiyyyy4KKhcKXbJ:DBL9+mBu9mPAcCKKhcKXbJ

Malware Config

Extracted

Family

xtremerat

C2

sophian.no-ip.biz

Targets

    • Target

      JaffaCakes118_70c4846da016989877ad76b2716a1d75

    • Size

      153KB

    • MD5

      70c4846da016989877ad76b2716a1d75

    • SHA1

      940172b00f78c80d1d29f3a4e368394b073bfff5

    • SHA256

      1e8de216803ac3f4102291bc7967f324097aa4081ba484c327f9484f48564d54

    • SHA512

      2b9249f1136884a5bb7def55d5d9ce35a886508cf98105c161cd6f62da6a02704734c54769ea9c95994cd465a02df5b5c7785d4aa43d76e9aec3f2d986094283

    • SSDEEP

      3072:DNsSLXeWz++ho0u6kmPAcSiyyyy4KKhcKXbJ:DBL9+mBu9mPAcCKKhcKXbJ

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks