General

  • Target

    5b9678025a320f55060edadac3c62249

  • Size

    65KB

  • Sample

    240114-xfs1xadfd6

  • MD5

    5b9678025a320f55060edadac3c62249

  • SHA1

    6f51ac8be18916eb89af18f56b4044366cba13ec

  • SHA256

    3f32c35a482f1afa38b0576374fa391148c1a6a7b7b94e39c7e83c285f41efd7

  • SHA512

    9081eeb3f6491933f0bfc9f83798c6b9a724bd674e5f63356db880a1e845cc07d7923807069d743ed3d9adca51ebc5204d14e82bb4e59ad0a77acf70f267ade2

  • SSDEEP

    768:d9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJ7A+7voNw:asq+Q1aZQuIyJp0mgA+FJ0LNw

Malware Config

Extracted

Family

xtremerat

C2

alssm.no-ip.biz

Targets

    • Target

      5b9678025a320f55060edadac3c62249

    • Size

      65KB

    • MD5

      5b9678025a320f55060edadac3c62249

    • SHA1

      6f51ac8be18916eb89af18f56b4044366cba13ec

    • SHA256

      3f32c35a482f1afa38b0576374fa391148c1a6a7b7b94e39c7e83c285f41efd7

    • SHA512

      9081eeb3f6491933f0bfc9f83798c6b9a724bd674e5f63356db880a1e845cc07d7923807069d743ed3d9adca51ebc5204d14e82bb4e59ad0a77acf70f267ade2

    • SSDEEP

      768:d9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJ7A+7voNw:asq+Q1aZQuIyJp0mgA+FJ0LNw

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks