General

  • Target

    60bfeeb3414bed8777634306dcf12cce_JaffaCakes118

  • Size

    65KB

  • Sample

    241020-gxypqatama

  • MD5

    60bfeeb3414bed8777634306dcf12cce

  • SHA1

    70576a0cd90b531b06cfb210723e86a2fb680226

  • SHA256

    9eab9c11ce7e599bcc1d05efdd064f82a04fa9f926007822fb586582e5cfec45

  • SHA512

    e9c16a149f8317fbf9a4eb4cf6a3ef4f65d7c6fca374a3b90fca4af7947e62621af96e204e35ede69ad6901bb1cada30c509f1a3792ded9776ad514682b75acc

  • SSDEEP

    768:3y8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5GXrUqLOY0jYKnA+7PoNwz/:Qsq+QV4rObAdNoAf8UqiYAlArNwHoQ

Malware Config

Extracted

Family

xtremerat

C2

avic.zapto.org

Targets

    • Target

      60bfeeb3414bed8777634306dcf12cce_JaffaCakes118

    • Size

      65KB

    • MD5

      60bfeeb3414bed8777634306dcf12cce

    • SHA1

      70576a0cd90b531b06cfb210723e86a2fb680226

    • SHA256

      9eab9c11ce7e599bcc1d05efdd064f82a04fa9f926007822fb586582e5cfec45

    • SHA512

      e9c16a149f8317fbf9a4eb4cf6a3ef4f65d7c6fca374a3b90fca4af7947e62621af96e204e35ede69ad6901bb1cada30c509f1a3792ded9776ad514682b75acc

    • SSDEEP

      768:3y8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5GXrUqLOY0jYKnA+7PoNwz/:Qsq+QV4rObAdNoAf8UqiYAlArNwHoQ

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks