General

  • Target

    b2b43b30096accfd747a1e866dbcaab6b7d63b5710fbecfd743835e214bc636d

  • Size

    33KB

  • Sample

    221201-kzlpqacg25

  • MD5

    68056fc40faf0cf930a17f40301cbc31

  • SHA1

    47257ce954bd7ed0083d67aa49da1ddd2bd99f4b

  • SHA256

    b2b43b30096accfd747a1e866dbcaab6b7d63b5710fbecfd743835e214bc636d

  • SHA512

    1601165c5dc1094ab2c99425da5ee9a61744f00df582439ef39b16318917c8a046dfbf4bb026bbfadbff24f4ff1043e3d4a6b7109792918c4463d55a2cf8044f

  • SSDEEP

    768:cMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lXkwVdVfEr:VNW71rcYDAWeotvXlUqPM

Malware Config

Extracted

Family

xtremerat

C2

eiqa-2.no-ip.biz

Targets

    • Target

      b2b43b30096accfd747a1e866dbcaab6b7d63b5710fbecfd743835e214bc636d

    • Size

      33KB

    • MD5

      68056fc40faf0cf930a17f40301cbc31

    • SHA1

      47257ce954bd7ed0083d67aa49da1ddd2bd99f4b

    • SHA256

      b2b43b30096accfd747a1e866dbcaab6b7d63b5710fbecfd743835e214bc636d

    • SHA512

      1601165c5dc1094ab2c99425da5ee9a61744f00df582439ef39b16318917c8a046dfbf4bb026bbfadbff24f4ff1043e3d4a6b7109792918c4463d55a2cf8044f

    • SSDEEP

      768:cMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lXkwVdVfEr:VNW71rcYDAWeotvXlUqPM

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks