General

  • Target

    fdbdb2519c54bbcbc97e3fdb8e4f2424_JaffaCakes118

  • Size

    131KB

  • Sample

    240929-ednz3a1glb

  • MD5

    fdbdb2519c54bbcbc97e3fdb8e4f2424

  • SHA1

    ec53fdb37ce15a6584e22d5fa220d42491f56860

  • SHA256

    8dda55117f705b4ee04b8baa4ffb272edd075bc7fa233b042892465958f156b0

  • SHA512

    aaf0d440ccd85e212480e90262a7e064eca56d983e0b9d33be98222a6d8fa4f2d84061e80317f269ce8f63fa074ebb3788d0049fe1c380ad8de044425e689410

  • SSDEEP

    1536:Tsq+QV4rObAdXWpf/y+YaAG4Rd6t3WcQ6G4Rd6t3WcQY:e44rj/laGRd6p2sRd6p2Y

Malware Config

Extracted

Family

xtremerat

C2

cheezhack.no-ip.org

Ÿ末效扈晈cheezhack.no-ip.org

Targets

    • Target

      fdbdb2519c54bbcbc97e3fdb8e4f2424_JaffaCakes118

    • Size

      131KB

    • MD5

      fdbdb2519c54bbcbc97e3fdb8e4f2424

    • SHA1

      ec53fdb37ce15a6584e22d5fa220d42491f56860

    • SHA256

      8dda55117f705b4ee04b8baa4ffb272edd075bc7fa233b042892465958f156b0

    • SHA512

      aaf0d440ccd85e212480e90262a7e064eca56d983e0b9d33be98222a6d8fa4f2d84061e80317f269ce8f63fa074ebb3788d0049fe1c380ad8de044425e689410

    • SSDEEP

      1536:Tsq+QV4rObAdXWpf/y+YaAG4Rd6t3WcQ6G4Rd6t3WcQY:e44rj/laGRd6p2sRd6p2Y

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks