General

  • Target

    f8f9c55ee736e58be5eaddb2a6e65a9a45e9249e6a0b1ec90aec13023572591f

  • Size

    33KB

  • Sample

    221003-s9baqsded2

  • MD5

    625cc6fea5c3c19b5e2b33822453e145

  • SHA1

    3b509800f6a586a24b0a86f709d6fa07792b87d0

  • SHA256

    f8f9c55ee736e58be5eaddb2a6e65a9a45e9249e6a0b1ec90aec13023572591f

  • SHA512

    4db37dbc5a399e7f97438297b007c37ae969f964d3f7810feec00a2420e5aa5a420ed9f70ee059bdea324320219aba371e929c7ad8391f9239a98c7c1fa7601e

  • SSDEEP

    768:EMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lwtzxtFNeIA:tNW71rcYDAWeotvXlWnFUI

Malware Config

Extracted

Family

xtremerat

C2

bbforlife.no-ip.org

Targets

    • Target

      f8f9c55ee736e58be5eaddb2a6e65a9a45e9249e6a0b1ec90aec13023572591f

    • Size

      33KB

    • MD5

      625cc6fea5c3c19b5e2b33822453e145

    • SHA1

      3b509800f6a586a24b0a86f709d6fa07792b87d0

    • SHA256

      f8f9c55ee736e58be5eaddb2a6e65a9a45e9249e6a0b1ec90aec13023572591f

    • SHA512

      4db37dbc5a399e7f97438297b007c37ae969f964d3f7810feec00a2420e5aa5a420ed9f70ee059bdea324320219aba371e929c7ad8391f9239a98c7c1fa7601e

    • SSDEEP

      768:EMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lwtzxtFNeIA:tNW71rcYDAWeotvXlWnFUI

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks