General

  • Target

    190418164eb0e71a5dbc48eab4bd9e6f_JaffaCakes118

  • Size

    62KB

  • Sample

    241006-v2l4dawcpm

  • MD5

    190418164eb0e71a5dbc48eab4bd9e6f

  • SHA1

    0ad57b643d8caeea70aaf2a91df064ee03e96470

  • SHA256

    f0b0e539193cca91b3685d634e214b23ec8b0b79c9aeb2f4273190c49024dbc4

  • SHA512

    1d3ebc149704dbbf8e2106773cabfd137ceacc323cf71c88089b32b9818af6ead538e4350770a5a0564ba59a92e1f45eca71ba219e1ae56387fd6ebe7396a82e

  • SSDEEP

    1536:tT8qDqQdU9MK3tGjbNwPZ6XAXHWzl+NX3w:5qLyKdceXHWZN

Malware Config

Extracted

Family

xtremerat

C2

11hack11.no-ip.biz

11hack1.no-ip.biz

䪤焙.jouba.no-ip.biz

Targets

    • Target

      190418164eb0e71a5dbc48eab4bd9e6f_JaffaCakes118

    • Size

      62KB

    • MD5

      190418164eb0e71a5dbc48eab4bd9e6f

    • SHA1

      0ad57b643d8caeea70aaf2a91df064ee03e96470

    • SHA256

      f0b0e539193cca91b3685d634e214b23ec8b0b79c9aeb2f4273190c49024dbc4

    • SHA512

      1d3ebc149704dbbf8e2106773cabfd137ceacc323cf71c88089b32b9818af6ead538e4350770a5a0564ba59a92e1f45eca71ba219e1ae56387fd6ebe7396a82e

    • SSDEEP

      1536:tT8qDqQdU9MK3tGjbNwPZ6XAXHWzl+NX3w:5qLyKdceXHWZN

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks