Overview

overview

10

Static

static

10

ee5cbc487c...18.exe

windows7-x64

10

ee5cbc487c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee5cbc487cf098607548cb0113bcc6ba_JaffaCakes118

  • Size

    85KB

  • Sample

    240411-z6m9fsgf8w

  • MD5

    ee5cbc487cf098607548cb0113bcc6ba

  • SHA1

    3273182eb021c9c5383fc5cb4f37bb1f4fe8223b

  • SHA256

    71ca4b5f39952e1f065af607d4c1dbc8c2e6bdd8a5da44cf94ea823bc16c6634

  • SHA512

    9110dba61808530fc58a902ab8a2093af17bfd270b070f4c67780dbe84efea552143c7b45d24e512f5b25a26dbec7c9d1e07628feaa3554a92f52cbcfb7f54d7

  • SSDEEP

    768:28m1Sq4NQErBsH1ezoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xoh:Esq+QVtrObAdXWpf/y+7ozNwiGfEftog

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Extracted

Family

xtremerat

C2

esam2at.no-ip.biz

Targets

    • Target

      ee5cbc487cf098607548cb0113bcc6ba_JaffaCakes118

    • Size

      85KB

    • MD5

      ee5cbc487cf098607548cb0113bcc6ba

    • SHA1

      3273182eb021c9c5383fc5cb4f37bb1f4fe8223b

    • SHA256

      71ca4b5f39952e1f065af607d4c1dbc8c2e6bdd8a5da44cf94ea823bc16c6634

    • SHA512

      9110dba61808530fc58a902ab8a2093af17bfd270b070f4c67780dbe84efea552143c7b45d24e512f5b25a26dbec7c9d1e07628feaa3554a92f52cbcfb7f54d7

    • SSDEEP

      768:28m1Sq4NQErBsH1ezoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xoh:Esq+QVtrObAdXWpf/y+7ozNwiGfEftog

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks