General

  • Target

    29ce3d7ca54d47f9de7cd645caa7f7b0_NeikiAnalytics.exe

  • Size

    81KB

  • Sample

    240528-a3r1ssgb2w

  • MD5

    29ce3d7ca54d47f9de7cd645caa7f7b0

  • SHA1

    37f6cd5c2fc976057f1f89846c376b8f5c7c2f8e

  • SHA256

    96fe9d93102a2d9f6d72114fd0dd2fc70d2acf9cdf3576efa2cce0dfc9e06e9e

  • SHA512

    bb077d087c0c30136c9a75f94effca7873f6cd3c200b03ab5bd4293dbed922aa5b8822c3d4b9455b394a36e3884fe27e6d521eccf7ec08568930f4a0eca62b4f

  • SSDEEP

    768:NhBr+tjFKsusi02s2VzfoFTrS75YAU074/uhvnenqneizoSGeUeZNXsdgD:NHyRQsiNVzwFfS75YAU08mhSOoj+NXD

Malware Config

Extracted

Family

xtremerat

C2

luffycdp.ddns.net

᢫懂ⴀ蠀C:\Userluffycdp.ddns.net

Targets

    • Target

      29ce3d7ca54d47f9de7cd645caa7f7b0_NeikiAnalytics.exe

    • Size

      81KB

    • MD5

      29ce3d7ca54d47f9de7cd645caa7f7b0

    • SHA1

      37f6cd5c2fc976057f1f89846c376b8f5c7c2f8e

    • SHA256

      96fe9d93102a2d9f6d72114fd0dd2fc70d2acf9cdf3576efa2cce0dfc9e06e9e

    • SHA512

      bb077d087c0c30136c9a75f94effca7873f6cd3c200b03ab5bd4293dbed922aa5b8822c3d4b9455b394a36e3884fe27e6d521eccf7ec08568930f4a0eca62b4f

    • SSDEEP

      768:NhBr+tjFKsusi02s2VzfoFTrS75YAU074/uhvnenqneizoSGeUeZNXsdgD:NHyRQsiNVzwFfS75YAU08mhSOoj+NXD

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks