General

  • Target

    3ac716d08d4400656fb19a2d9ec49de2fbe8fe8fedbe85de84109b1529309fff

  • Size

    33KB

  • Sample

    221011-xzpslabbgm

  • MD5

    103bf31418e4f3984d8dac41b49bb0f6

  • SHA1

    fd18a56e03b44b8011db5b6080a838f5e8c3ee11

  • SHA256

    3ac716d08d4400656fb19a2d9ec49de2fbe8fe8fedbe85de84109b1529309fff

  • SHA512

    e96209bf92ad49eab5035d71e9b431af0336071edad83005a6d1ee104ad15dbec05b5d05001f4cc79a9d4e18c6c58da797cea7b5886cfe728fa453b61edd7cab

  • SSDEEP

    768:RMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lXtzLQtmUiYLUku:6NW71rcYDAWeotvXldwtf

Malware Config

Extracted

Family

xtremerat

C2

t888.no-ip.org

Targets

    • Target

      3ac716d08d4400656fb19a2d9ec49de2fbe8fe8fedbe85de84109b1529309fff

    • Size

      33KB

    • MD5

      103bf31418e4f3984d8dac41b49bb0f6

    • SHA1

      fd18a56e03b44b8011db5b6080a838f5e8c3ee11

    • SHA256

      3ac716d08d4400656fb19a2d9ec49de2fbe8fe8fedbe85de84109b1529309fff

    • SHA512

      e96209bf92ad49eab5035d71e9b431af0336071edad83005a6d1ee104ad15dbec05b5d05001f4cc79a9d4e18c6c58da797cea7b5886cfe728fa453b61edd7cab

    • SSDEEP

      768:RMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lXtzLQtmUiYLUku:6NW71rcYDAWeotvXldwtf

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks