General

  • Target

    5c6f56a579c01486142b110db4ffc429_JaffaCakes118

  • Size

    65KB

  • Sample

    241019-nqwecawckp

  • MD5

    5c6f56a579c01486142b110db4ffc429

  • SHA1

    9848bec4adfe6186795c14b943f57207eb389131

  • SHA256

    8b5a2fb7015424bc6ba3089c13f8612177555c67bb81a117e41dc916e4a51a1d

  • SHA512

    5c844e50f2bae214f113efc2b4377df1b6cd9472bc347791fedfdee6c59ddf02963b71a1098979a8a083aecf48fa0708b6abecd2ac7cedbea0263f1fb97b2cfb

  • SSDEEP

    768:jlm1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifncm/yyR+P2ujfGiWqfA+7XoG:8sq+QV4rObAdXWpfzy+c4zNwi8F

Malware Config

Extracted

Family

xtremerat

C2

hamadah.no-ip.biz

￿hamadah.zapto.org

Targets

    • Target

      5c6f56a579c01486142b110db4ffc429_JaffaCakes118

    • Size

      65KB

    • MD5

      5c6f56a579c01486142b110db4ffc429

    • SHA1

      9848bec4adfe6186795c14b943f57207eb389131

    • SHA256

      8b5a2fb7015424bc6ba3089c13f8612177555c67bb81a117e41dc916e4a51a1d

    • SHA512

      5c844e50f2bae214f113efc2b4377df1b6cd9472bc347791fedfdee6c59ddf02963b71a1098979a8a083aecf48fa0708b6abecd2ac7cedbea0263f1fb97b2cfb

    • SSDEEP

      768:jlm1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifncm/yyR+P2ujfGiWqfA+7XoG:8sq+QV4rObAdXWpfzy+c4zNwi8F

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks