General

  • Target

    171960c0d1d29fbc32a730724c863b88_JaffaCakes118

  • Size

    52KB

  • Sample

    241005-lbv4xs1gpb

  • MD5

    171960c0d1d29fbc32a730724c863b88

  • SHA1

    8a63d0ea07b7e05dcbd0c5a898e274e255e31c52

  • SHA256

    c22fd335022878e84799ff86fcef6476490db25e039d86cdd0c1414b54bdb0e7

  • SHA512

    648c123b2028930018bdff824303f730752e3d74857a687fdd7b522fbc9acd06cd6e37b30a2755a9fe925e1458dc47dce90a3aead96b7c0f6064bf7031e904c1

  • SSDEEP

    768:5Wc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcKAS7dSSkJj:Uc9quCDQTwM9By25u3t

Malware Config

Extracted

Family

xtremerat

C2

daly00.no-ip.biz

Targets

    • Target

      171960c0d1d29fbc32a730724c863b88_JaffaCakes118

    • Size

      52KB

    • MD5

      171960c0d1d29fbc32a730724c863b88

    • SHA1

      8a63d0ea07b7e05dcbd0c5a898e274e255e31c52

    • SHA256

      c22fd335022878e84799ff86fcef6476490db25e039d86cdd0c1414b54bdb0e7

    • SHA512

      648c123b2028930018bdff824303f730752e3d74857a687fdd7b522fbc9acd06cd6e37b30a2755a9fe925e1458dc47dce90a3aead96b7c0f6064bf7031e904c1

    • SSDEEP

      768:5Wc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcKAS7dSSkJj:Uc9quCDQTwM9By25u3t

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks