General

  • Target

    5f08eaa1825e88326de950d155aa9729_JaffaCakes118

  • Size

    81KB

  • Sample

    241019-2l7tgavhlj

  • MD5

    5f08eaa1825e88326de950d155aa9729

  • SHA1

    798d9449f44611d3e1cae50b1be6eb426449d74e

  • SHA256

    7dca8ecb431a4e7c759c7ceb69f5e53ddb91876577b10be74720b202cbc30e01

  • SHA512

    d4fa3a4dc31847243cf2d9f4b25eb390d3383b8f30335d71ac7e8be0a700a0fc7490bec11381cc57fd636a8b6e8d505a015760545e3311265c2c6e103f82564c

  • SSDEEP

    1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWWl5NX3RfEfE:DqMyKdcPeXHWI1cs

Malware Config

Extracted

Family

xtremerat

C2

esam2at.no-ip.biz

Targets

    • Target

      5f08eaa1825e88326de950d155aa9729_JaffaCakes118

    • Size

      81KB

    • MD5

      5f08eaa1825e88326de950d155aa9729

    • SHA1

      798d9449f44611d3e1cae50b1be6eb426449d74e

    • SHA256

      7dca8ecb431a4e7c759c7ceb69f5e53ddb91876577b10be74720b202cbc30e01

    • SHA512

      d4fa3a4dc31847243cf2d9f4b25eb390d3383b8f30335d71ac7e8be0a700a0fc7490bec11381cc57fd636a8b6e8d505a015760545e3311265c2c6e103f82564c

    • SSDEEP

      1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWWl5NX3RfEfE:DqMyKdcPeXHWI1cs

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks