General

  • Target

    bbf6e78eae32e62aea411bc49f6f4480d8466e410479c8ab14f732c370283147

  • Size

    26KB

  • Sample

    221011-xzw7nsbaa9

  • MD5

    18cbd1c14d798ee38ad616b3f359f21e

  • SHA1

    1d11843942f5455f5c8a638ad9283bcf12250392

  • SHA256

    bbf6e78eae32e62aea411bc49f6f4480d8466e410479c8ab14f732c370283147

  • SHA512

    e6a45aade5d0f2f2eac2d495036d3ebc194d290e89b5335737ca2f93e2ae988f60185a3dbfc09987c6601c6c16f70f93ed980c8d1c620395cad99c90cc8d81ce

  • SSDEEP

    384:VDmxsvw+nC7+z7pFZowqrdjLRi8JgxEd1iagAAunpe7achfzv/djPmd05KUI5aBD:Vyxsv4Mb+dRdSxEHj1WDFK/UlBfc1uR

Malware Config

Extracted

Family

xtremerat

C2

wwxxzz1.dnsd.info

Targets

    • Target

      bbf6e78eae32e62aea411bc49f6f4480d8466e410479c8ab14f732c370283147

    • Size

      26KB

    • MD5

      18cbd1c14d798ee38ad616b3f359f21e

    • SHA1

      1d11843942f5455f5c8a638ad9283bcf12250392

    • SHA256

      bbf6e78eae32e62aea411bc49f6f4480d8466e410479c8ab14f732c370283147

    • SHA512

      e6a45aade5d0f2f2eac2d495036d3ebc194d290e89b5335737ca2f93e2ae988f60185a3dbfc09987c6601c6c16f70f93ed980c8d1c620395cad99c90cc8d81ce

    • SSDEEP

      384:VDmxsvw+nC7+z7pFZowqrdjLRi8JgxEd1iagAAunpe7achfzv/djPmd05KUI5aBD:Vyxsv4Mb+dRdSxEHj1WDFK/UlBfc1uR

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks