General

  • Target

    b950ce56cf9df79a1fd5345f266fd2d0f50a03419e9bd4be0d227825c108fa70

  • Size

    33KB

  • Sample

    221123-3g9myace23

  • MD5

    43693e0d63cbba43ec1ef277a1aba30d

  • SHA1

    8187f69d6bfb0ddf8f80d96d29da7f6a71bbfa16

  • SHA256

    b950ce56cf9df79a1fd5345f266fd2d0f50a03419e9bd4be0d227825c108fa70

  • SHA512

    fcdaa31547e12dbeb1ac0d16164d41674161e181d300a4e7148a4342c482cae56a2ca083e901e10a30da05fefe44ff0787cdea83e5535ba3302968074179b399

  • SSDEEP

    768:4MuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lpqYVZKdqi:RNW71rcYDAWeotvXltVZKw

Malware Config

Extracted

Family

xtremerat

C2

shehan511.no-ip.org

Targets

    • Target

      b950ce56cf9df79a1fd5345f266fd2d0f50a03419e9bd4be0d227825c108fa70

    • Size

      33KB

    • MD5

      43693e0d63cbba43ec1ef277a1aba30d

    • SHA1

      8187f69d6bfb0ddf8f80d96d29da7f6a71bbfa16

    • SHA256

      b950ce56cf9df79a1fd5345f266fd2d0f50a03419e9bd4be0d227825c108fa70

    • SHA512

      fcdaa31547e12dbeb1ac0d16164d41674161e181d300a4e7148a4342c482cae56a2ca083e901e10a30da05fefe44ff0787cdea83e5535ba3302968074179b399

    • SSDEEP

      768:4MuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lpqYVZKdqi:RNW71rcYDAWeotvXltVZKw

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks