General

  • Target

    71e8802ab441c062584a275048f5b587_JaffaCakes118

  • Size

    62KB

  • Sample

    240726-aycqbayajd

  • MD5

    71e8802ab441c062584a275048f5b587

  • SHA1

    e44e4b41a79e41d2ad14e5305deb1234ff46fee7

  • SHA256

    319bd044c2603712d845968af175e04a02a7b06e57345ff61905d257f82d27bb

  • SHA512

    46b918621e99c6448a6ba3209fa1e48bd325ddf279b71260045bd6199f9a7471837732507c0bd0af3f742731e7514d8fdb8e226ff6d678cf78e1f7e54b742f6d

  • SSDEEP

    1536:tT8qDqQ+U9MKWtGjbNwPZXpxXHWTlfNX3/:5qAyKqcMXHW59

Malware Config

Extracted

Family

xtremerat

C2

updatsys.sytes.net

Targets

    • Target

      71e8802ab441c062584a275048f5b587_JaffaCakes118

    • Size

      62KB

    • MD5

      71e8802ab441c062584a275048f5b587

    • SHA1

      e44e4b41a79e41d2ad14e5305deb1234ff46fee7

    • SHA256

      319bd044c2603712d845968af175e04a02a7b06e57345ff61905d257f82d27bb

    • SHA512

      46b918621e99c6448a6ba3209fa1e48bd325ddf279b71260045bd6199f9a7471837732507c0bd0af3f742731e7514d8fdb8e226ff6d678cf78e1f7e54b742f6d

    • SSDEEP

      1536:tT8qDqQ+U9MKWtGjbNwPZXpxXHWTlfNX3/:5qAyKqcMXHW59

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks