Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7e77703d1da5b876617de96f1d317dd5

  • Size

    33KB

  • Sample

    250317-sw3g3awqv6

  • MD5

    7e77703d1da5b876617de96f1d317dd5

  • SHA1

    405acef5c2285bba935a1930904565e8dcdd679c

  • SHA256

    e67cb028861b20611dcea8e577f43a394c105a4a110ba8f6a107f38bcff5b745

  • SHA512

    e563a7fcd08aa8ff77911af3096d85b51486c87fa617eab5ab97a7993c88cbc93fa492df4d296f3440d4b191b62bdafb0d052642697a6181a4cbae235fcbe135

  • SSDEEP

    768:pMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lEtz1kPQ:iNW71rcYDAWeotvXlSC

Malware Config

Extracted

Family

xtremerat

C2

azert123.no-ip.org

Targets

    • Target

      JaffaCakes118_7e77703d1da5b876617de96f1d317dd5

    • Size

      33KB

    • MD5

      7e77703d1da5b876617de96f1d317dd5

    • SHA1

      405acef5c2285bba935a1930904565e8dcdd679c

    • SHA256

      e67cb028861b20611dcea8e577f43a394c105a4a110ba8f6a107f38bcff5b745

    • SHA512

      e563a7fcd08aa8ff77911af3096d85b51486c87fa617eab5ab97a7993c88cbc93fa492df4d296f3440d4b191b62bdafb0d052642697a6181a4cbae235fcbe135

    • SSDEEP

      768:pMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lEtz1kPQ:iNW71rcYDAWeotvXlSC

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks