General

  • Target

    bc70d799dcb48522154426b341a7903ad4a9e4d7cf86935fc601a1ac21ae5d28

  • Size

    37KB

  • Sample

    240419-vw8eesbc4x

  • MD5

    61e7fa9f16b10b967b02e9a068a7f7b4

  • SHA1

    24439f401fc2d19a8074cb1ff9dc0880efedb603

  • SHA256

    bc70d799dcb48522154426b341a7903ad4a9e4d7cf86935fc601a1ac21ae5d28

  • SHA512

    342a04564a50b8b09a13822a8bf2a1d53d26e93200f6f0b67e50e93f11a0a348c7d25d479389e413d8296351b6cc26d9d5e29708b01b80e44d17a0343194ba71

  • SSDEEP

    768:vmFKq/VcF47SP3Fa8IiRZYXTn2SqR7xjxmLu0CUaUOKLLvRIkTW:tq9nMVfgjn2SsVjgLu0dayLLv8

Malware Config

Extracted

Family

xtremerat

C2

hackercool.zapto.org

Targets

    • Target

      1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731.exe

    • Size

      87KB

    • MD5

      a579638803127888421deeba6042cc4f

    • SHA1

      6142f6795670800c76eebc838345c87bcff1049f

    • SHA256

      1596461c2b35c6736e48fb1a3c671aa86bbfecbfadb9dbfb63f372bddffe1731

    • SHA512

      3fc1dddc9599a9fee44af70c00345189b04b9c50f6b2faf09acc55c7532f2037de4ba9bd87719b7659b1ee44161762318555e03fc1d112f6282b86dd2496523c

    • SSDEEP

      768:09m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJC+S3MgyRARlJ+gc:Vsq+Q1aZQuIyJp0mgA+FJoEAbL

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Tasks