General

  • Target

    54eed82c9a44cbb469a3285cfff42f282c697e6f57d581bffd8591a0a32e5d15

  • Size

    33KB

  • Sample

    221201-kzsg9scg38

  • MD5

    7ecf50d1803dfdea391eadf1b7687240

  • SHA1

    fc0dd55b1fa2cc14c409d652533e0bef58e7b950

  • SHA256

    54eed82c9a44cbb469a3285cfff42f282c697e6f57d581bffd8591a0a32e5d15

  • SHA512

    99d19693e2af7446bd09a9ec7a6c1d8b144f17f24abf8006eff4a2316ea80b91fdc108be923d8239c1df64552a506b179cf01a44f9323e202432edd7b64e5aa5

  • SSDEEP

    768:HMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lJtz5O:sNW71rcYDAWeotvXlP

Malware Config

Extracted

Family

xtremerat

C2

ehab2000.no-ip.biz

Targets

    • Target

      54eed82c9a44cbb469a3285cfff42f282c697e6f57d581bffd8591a0a32e5d15

    • Size

      33KB

    • MD5

      7ecf50d1803dfdea391eadf1b7687240

    • SHA1

      fc0dd55b1fa2cc14c409d652533e0bef58e7b950

    • SHA256

      54eed82c9a44cbb469a3285cfff42f282c697e6f57d581bffd8591a0a32e5d15

    • SHA512

      99d19693e2af7446bd09a9ec7a6c1d8b144f17f24abf8006eff4a2316ea80b91fdc108be923d8239c1df64552a506b179cf01a44f9323e202432edd7b64e5aa5

    • SSDEEP

      768:HMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lJtz5O:sNW71rcYDAWeotvXlP

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks