Overview

overview

10

Static

static

10

54bf738d4c...18.exe

windows7-x64

10

54bf738d4c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54bf738d4c7b3be0dc774be24661426c_JaffaCakes118

  • Size

    33KB

  • Sample

    240518-pwsq3sca29

  • MD5

    54bf738d4c7b3be0dc774be24661426c

  • SHA1

    cc940e82e0290d4884056e1d8282f82a18752b7d

  • SHA256

    f90827388b49fda103b04ef93b808141c0552ab974b9aaabd02c22bb0de61ca7

  • SHA512

    4331cfbe432f0ed1e4e16bccd6b17c99d7064ef4b91b17f39b34dcc89d129917c0d5a2a781c7948a666dae1b4a8389988daf28160fda5bca0a649e0436a426f2

  • SSDEEP

    768:KMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lOYVJ2/PbHiSIr:3NW71rcYDAWeotvXlXwi

Score
10/10
xtremeratpersistenceratspywareupx

Malware Config

Extracted

Family

xtremerat

C2

hacku11.ddns.net

Targets

    • Target

      54bf738d4c7b3be0dc774be24661426c_JaffaCakes118

    • Size

      33KB

    • MD5

      54bf738d4c7b3be0dc774be24661426c

    • SHA1

      cc940e82e0290d4884056e1d8282f82a18752b7d

    • SHA256

      f90827388b49fda103b04ef93b808141c0552ab974b9aaabd02c22bb0de61ca7

    • SHA512

      4331cfbe432f0ed1e4e16bccd6b17c99d7064ef4b91b17f39b34dcc89d129917c0d5a2a781c7948a666dae1b4a8389988daf28160fda5bca0a649e0436a426f2

    • SSDEEP

      768:KMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lOYVJ2/PbHiSIr:3NW71rcYDAWeotvXlXwi

    Score
    10/10
    xtremeratpersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks