General

  • Target

    671b203d924da9d4c77e232180702d67_JaffaCakes118

  • Size

    42KB

  • Sample

    241021-yj6xlssfnd

  • MD5

    671b203d924da9d4c77e232180702d67

  • SHA1

    21cad9b28c6c860a657de467d163eb1ba43be93b

  • SHA256

    5a4f573a3dd782ead6e2c328870f00e6172bf36d80888d0dbf7e490fb3f5f21f

  • SHA512

    697bd541ffcadd01cb08ff745410b5f8e7cc12b59d2f1d851c5a0a24557530523d3f0769a61db14f629034832eabff3714a87e0eae49d5245d22217bf282451f

  • SSDEEP

    768:8jups9Xmn9VyMltWqPsJQYCOGpVTOD4pR2WgInNJw+6lg6WEGnxYbPrj:HiWnWjqP0QYzGpgDArn56S6WEdn

Malware Config

Extracted

Family

xtremerat

C2

耀27dreamupdata.no-ip.biz

Targets

    • Target

      671b203d924da9d4c77e232180702d67_JaffaCakes118

    • Size

      42KB

    • MD5

      671b203d924da9d4c77e232180702d67

    • SHA1

      21cad9b28c6c860a657de467d163eb1ba43be93b

    • SHA256

      5a4f573a3dd782ead6e2c328870f00e6172bf36d80888d0dbf7e490fb3f5f21f

    • SHA512

      697bd541ffcadd01cb08ff745410b5f8e7cc12b59d2f1d851c5a0a24557530523d3f0769a61db14f629034832eabff3714a87e0eae49d5245d22217bf282451f

    • SSDEEP

      768:8jups9Xmn9VyMltWqPsJQYCOGpVTOD4pR2WgInNJw+6lg6WEGnxYbPrj:HiWnWjqP0QYzGpgDArn56S6WEdn

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

MITRE ATT&CK Enterprise v15

Tasks