General

  • Target

    bc551d3cb16f3a1318c06551ff6d1534_JaffaCakes118

  • Size

    65KB

  • Sample

    240823-s1aylssfjc

  • MD5

    bc551d3cb16f3a1318c06551ff6d1534

  • SHA1

    500d0477a89df8d260230c6c095e47ac55552047

  • SHA256

    709ab2195aca3686e84d93dbc1b9d36f8b12f3b75e45f274fc0cec086e0adb07

  • SHA512

    172fd6bd942e94166e403bf8cc8f4af65024f9351234fbafc5350ce8aa7c9b368c7d2d8d83dae99dae3b9e28307e50a03b5b552ea4455bc35b3108a421dd6716

  • SSDEEP

    768:E9m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNwqXSAHUp:lsq+QI6ZQuIyJh0mgA+FW0gNwEi

Malware Config

Extracted

Family

xtremerat

C2

a323.no-ip.biz

Targets

    • Target

      bc551d3cb16f3a1318c06551ff6d1534_JaffaCakes118

    • Size

      65KB

    • MD5

      bc551d3cb16f3a1318c06551ff6d1534

    • SHA1

      500d0477a89df8d260230c6c095e47ac55552047

    • SHA256

      709ab2195aca3686e84d93dbc1b9d36f8b12f3b75e45f274fc0cec086e0adb07

    • SHA512

      172fd6bd942e94166e403bf8cc8f4af65024f9351234fbafc5350ce8aa7c9b368c7d2d8d83dae99dae3b9e28307e50a03b5b552ea4455bc35b3108a421dd6716

    • SSDEEP

      768:E9m1Sq4NQNLBGH1vcz0wDeeQuMVTyN8ihHo37Vmd6AeXVtWAW7A+7yoNwqXSAHUp:lsq+QI6ZQuIyJh0mgA+FW0gNwEi

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks