General

  • Target

    46e72e530015a9be8047c20b5bc0717a_JaffaCakes118

  • Size

    62KB

  • Sample

    241015-k2kkfazdkj

  • MD5

    46e72e530015a9be8047c20b5bc0717a

  • SHA1

    56686119cc60ecb6922b5a5cbaf25d84b546958e

  • SHA256

    b8f808bc2f8efc57fab858364fc2fd07bd35e948da11dc78da0e2830f3533c82

  • SHA512

    5422a45f4de594ea6e5222a2272fcc88a5a604ae8b56b083e9846c5977432774eb01722fea41386ca428dd465e23860cc56481b9c7f6d392349b92cb4d19c7a5

  • SSDEEP

    1536:tT8qDqQ+U9MK3tGjbNwPZ6pxXHWulfNX3D:5qAyKdcNXHWwV

Malware Config

Extracted

Family

xtremerat

C2

updatsys.sytes.net

Targets

    • Target

      46e72e530015a9be8047c20b5bc0717a_JaffaCakes118

    • Size

      62KB

    • MD5

      46e72e530015a9be8047c20b5bc0717a

    • SHA1

      56686119cc60ecb6922b5a5cbaf25d84b546958e

    • SHA256

      b8f808bc2f8efc57fab858364fc2fd07bd35e948da11dc78da0e2830f3533c82

    • SHA512

      5422a45f4de594ea6e5222a2272fcc88a5a604ae8b56b083e9846c5977432774eb01722fea41386ca428dd465e23860cc56481b9c7f6d392349b92cb4d19c7a5

    • SSDEEP

      1536:tT8qDqQ+U9MK3tGjbNwPZ6pxXHWulfNX3D:5qAyKdcNXHWwV

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks