General

  • Target

    0175ea6924fd8a96fc14c63e487efc20_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240617-zrh17atfka

  • MD5

    0175ea6924fd8a96fc14c63e487efc20

  • SHA1

    0b2521468684fd860141b550e9dd226f6d59802d

  • SHA256

    0ec672a4bf4af17b52cf454c2a1304a9b146e7e543f7282abfa94cfe6e578fb0

  • SHA512

    5d63dbb65c19e161c4600cfae2906e38633792e9d7ee8b693355460ce8762b06a56096ad367b30d6d9c5bd22bbf0f7702179d27e2c61400a12646ba97cfe0068

  • SSDEEP

    768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8HFPp:esq+QV4rObAdXWpf/y+YalR

Malware Config

Extracted

Family

xtremerat

C2

vicenpro.zapto.org

Targets

    • Target

      0175ea6924fd8a96fc14c63e487efc20_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      0175ea6924fd8a96fc14c63e487efc20

    • SHA1

      0b2521468684fd860141b550e9dd226f6d59802d

    • SHA256

      0ec672a4bf4af17b52cf454c2a1304a9b146e7e543f7282abfa94cfe6e578fb0

    • SHA512

      5d63dbb65c19e161c4600cfae2906e38633792e9d7ee8b693355460ce8762b06a56096ad367b30d6d9c5bd22bbf0f7702179d27e2c61400a12646ba97cfe0068

    • SSDEEP

      768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiXsbs8HFPp:esq+QV4rObAdXWpf/y+YalR

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks