General

  • Target

    55b0761663a3d6e0a2300a41c1e730d0.exe

  • Size

    33KB

  • Sample

    231127-xd9wmsbh3x

  • MD5

    55b0761663a3d6e0a2300a41c1e730d0

  • SHA1

    0309b49ab78e42b4353dcdb5b0f396b868a6dc17

  • SHA256

    fb0556f70d3beaba22b8947c382ef69573c1a04b75e121109e231a538e5551b5

  • SHA512

    0c0e21dab9d2104cf163d8e2ad1c0fd0c2e63296f8fceaaa2cb32f05e99bf146a2b4c6742695740635775182e9a0416f87ac5797606124cf602c38d59767b256

  • SSDEEP

    768:mMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lttzw0K+L:TNW71rcYDAWeotvXlrC+

Malware Config

Extracted

Family

xtremerat

C2

betano10kkk.ddns.net

Targets

    • Target

      55b0761663a3d6e0a2300a41c1e730d0.exe

    • Size

      33KB

    • MD5

      55b0761663a3d6e0a2300a41c1e730d0

    • SHA1

      0309b49ab78e42b4353dcdb5b0f396b868a6dc17

    • SHA256

      fb0556f70d3beaba22b8947c382ef69573c1a04b75e121109e231a538e5551b5

    • SHA512

      0c0e21dab9d2104cf163d8e2ad1c0fd0c2e63296f8fceaaa2cb32f05e99bf146a2b4c6742695740635775182e9a0416f87ac5797606124cf602c38d59767b256

    • SSDEEP

      768:mMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lttzw0K+L:TNW71rcYDAWeotvXlrC+

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks