General

  • Target

    756cb353f3bb83dd2317950dc0b0fb23_JaffaCakes118

  • Size

    65KB

  • Sample

    240526-n9t1maah2x

  • MD5

    756cb353f3bb83dd2317950dc0b0fb23

  • SHA1

    39d60b97cf045e9462921fb63248f6d0bddb8b7f

  • SHA256

    e6123e02a34b7b2668832cdd15c5945f7ec2825003865f0d09d98152f2be1a1d

  • SHA512

    d0d9ab55b2e5b06f098867b1d2883ce78b9d18d46a0289450d6252676ebd150226880dc84137793e93373af146462d420534d52643bd7914431111204fb9a076

  • SSDEEP

    768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8HOzJ:esq+QV4rObAdXWpf/y+YaSom

Malware Config

Extracted

Family

xtremerat

C2

mesn.no-ip.biz

Targets

    • Target

      756cb353f3bb83dd2317950dc0b0fb23_JaffaCakes118

    • Size

      65KB

    • MD5

      756cb353f3bb83dd2317950dc0b0fb23

    • SHA1

      39d60b97cf045e9462921fb63248f6d0bddb8b7f

    • SHA256

      e6123e02a34b7b2668832cdd15c5945f7ec2825003865f0d09d98152f2be1a1d

    • SHA512

      d0d9ab55b2e5b06f098867b1d2883ce78b9d18d46a0289450d6252676ebd150226880dc84137793e93373af146462d420534d52643bd7914431111204fb9a076

    • SSDEEP

      768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8HOzJ:esq+QV4rObAdXWpf/y+YaSom

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks