General

  • Target

    25cd0a6bad28eb6da6942cb0b1baf1e7e16e7775086c2b38facab7193f962e0bN

  • Size

    31KB

  • Sample

    241009-sb4vdsxejq

  • MD5

    18e89b72077ea52611cd34097bc419f0

  • SHA1

    8ab38edb43f02af4197b0b0fcd0c2339068db167

  • SHA256

    25cd0a6bad28eb6da6942cb0b1baf1e7e16e7775086c2b38facab7193f962e0b

  • SHA512

    7fe47953ef703a3fc0f3a8b05c7aacde2edb59bbdb44d79def57c184967fbad258f4f48033107bc653048b6d80b83a2b50188617315b1630b8b1b1647da918e3

  • SSDEEP

    768:fsuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jGs1jVHv:UNW70x6ALBwuBP

Malware Config

Extracted

Family

xtremerat

C2

moumou0000.no-ip.biz

Targets

    • Target

      25cd0a6bad28eb6da6942cb0b1baf1e7e16e7775086c2b38facab7193f962e0bN

    • Size

      31KB

    • MD5

      18e89b72077ea52611cd34097bc419f0

    • SHA1

      8ab38edb43f02af4197b0b0fcd0c2339068db167

    • SHA256

      25cd0a6bad28eb6da6942cb0b1baf1e7e16e7775086c2b38facab7193f962e0b

    • SHA512

      7fe47953ef703a3fc0f3a8b05c7aacde2edb59bbdb44d79def57c184967fbad258f4f48033107bc653048b6d80b83a2b50188617315b1630b8b1b1647da918e3

    • SSDEEP

      768:fsuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jGs1jVHv:UNW70x6ALBwuBP

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks