General

  • Target

    02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc

  • Size

    33KB

  • Sample

    221030-vzftkscgbm

  • MD5

    5607f7ca96df604fadfb3a12d587c32e

  • SHA1

    024c35bbf81a9d3e35ccb4129931ec58eca0864c

  • SHA256

    02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc

  • SHA512

    af3377c17efcc568c67a0aa1da8720e11b42ccbbf77f2a7a67c13c02cc3085601815383d76d9fafee29d497bab51e27db19350d0b2823cedca04337205510d61

  • SSDEEP

    768:rMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l9IPByP:wNW71rcYDAWeotvXle5

Malware Config

Extracted

Family

xtremerat

C2

pexecabal.no-ip.org

￿pexecabal.no-ip.org

Targets

    • Target

      02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc

    • Size

      33KB

    • MD5

      5607f7ca96df604fadfb3a12d587c32e

    • SHA1

      024c35bbf81a9d3e35ccb4129931ec58eca0864c

    • SHA256

      02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc

    • SHA512

      af3377c17efcc568c67a0aa1da8720e11b42ccbbf77f2a7a67c13c02cc3085601815383d76d9fafee29d497bab51e27db19350d0b2823cedca04337205510d61

    • SSDEEP

      768:rMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l9IPByP:wNW71rcYDAWeotvXle5

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks