General

  • Target

    76965fd607f94445c7904be4b4e33daf_JaffaCakes118

  • Size

    382KB

  • Sample

    240526-yascvsab72

  • MD5

    76965fd607f94445c7904be4b4e33daf

  • SHA1

    0e9beeb85e6e5ee601925fc0f06f1e11a97106c9

  • SHA256

    b8882a92c1b7632aad78f52efb1c4a8719417e85b413c4f6648fff5aa9e93eac

  • SHA512

    293c6dd9205ecaa6968e8f3aa9db9acc98fc5f963695cabf69be12245ea6009f717072c6ab07154bda9cff145ddb4ae947acd924c7f2bd728e8ed238bb65bcfd

  • SSDEEP

    6144:5ZflRO64QOFAqQZswiDlRO64QOFAqQZswii:flKQeaswMlKQeasw

Malware Config

Extracted

Family

xtremerat

C2

totty46.no-ip.org

Targets

    • Target

      76965fd607f94445c7904be4b4e33daf_JaffaCakes118

    • Size

      382KB

    • MD5

      76965fd607f94445c7904be4b4e33daf

    • SHA1

      0e9beeb85e6e5ee601925fc0f06f1e11a97106c9

    • SHA256

      b8882a92c1b7632aad78f52efb1c4a8719417e85b413c4f6648fff5aa9e93eac

    • SHA512

      293c6dd9205ecaa6968e8f3aa9db9acc98fc5f963695cabf69be12245ea6009f717072c6ab07154bda9cff145ddb4ae947acd924c7f2bd728e8ed238bb65bcfd

    • SSDEEP

      6144:5ZflRO64QOFAqQZswiDlRO64QOFAqQZswii:flKQeaswMlKQeasw

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks