General

  • Target

    8daf880cb6974c1e8f9a0f023aecf45c_JaffaCakes118

  • Size

    65KB

  • Sample

    241103-1txg2awdpm

  • MD5

    8daf880cb6974c1e8f9a0f023aecf45c

  • SHA1

    0a321c3f04e02565c6a117cf55b29e7a1a72b8a9

  • SHA256

    ea0d44c1f089d1f9f706a9e6970333ac1d1ba0ee2ebc09bb342ac08bfd40800d

  • SHA512

    562607b468a3199b4d05179ca82ad4f20c33b6e7a5964162839e54ba4d44396657e1ace6be31c8318c6526bc15cc3851a78833aab5246fd8e407f9de6703188f

  • SSDEEP

    768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoF:Qsq+QV4rObAdXWpf/y+7ozNwi1hHaw

Malware Config

Extracted

Family

xtremerat

C2

贀䄯尺murataab.no-ip.biz

murataab.no-ip.biz

Targets

    • Target

      8daf880cb6974c1e8f9a0f023aecf45c_JaffaCakes118

    • Size

      65KB

    • MD5

      8daf880cb6974c1e8f9a0f023aecf45c

    • SHA1

      0a321c3f04e02565c6a117cf55b29e7a1a72b8a9

    • SHA256

      ea0d44c1f089d1f9f706a9e6970333ac1d1ba0ee2ebc09bb342ac08bfd40800d

    • SHA512

      562607b468a3199b4d05179ca82ad4f20c33b6e7a5964162839e54ba4d44396657e1ace6be31c8318c6526bc15cc3851a78833aab5246fd8e407f9de6703188f

    • SSDEEP

      768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoF:Qsq+QV4rObAdXWpf/y+7ozNwi1hHaw

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks