General

  • Target

    8b679de54e5842a9ae8c9aac0650675b_JaffaCakes118

  • Size

    66KB

  • Sample

    241103-pabknstfrr

  • MD5

    8b679de54e5842a9ae8c9aac0650675b

  • SHA1

    4d2d1f5a67357fc7791ba1e4ab736d2c083726b5

  • SHA256

    1ba9e0e680bb0600dd352b879a25b7db298f67af0389dc17a7294e576e631561

  • SHA512

    e99feaf79b8b035a86a8dca6a5001ee276305ae80e696ab8d05fcc4a1114776056b70647214232e795297a7598f1eba7d78e3cb5aec0b82723f839832b686dd0

  • SSDEEP

    768:I9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJXSTbtFggSl5q:psq+Q1aZQuIyJp0mgA+FJ0+5q

Malware Config

Extracted

Family

xtremerat

C2

loool200.no-ip.org

Targets

    • Target

      8b679de54e5842a9ae8c9aac0650675b_JaffaCakes118

    • Size

      66KB

    • MD5

      8b679de54e5842a9ae8c9aac0650675b

    • SHA1

      4d2d1f5a67357fc7791ba1e4ab736d2c083726b5

    • SHA256

      1ba9e0e680bb0600dd352b879a25b7db298f67af0389dc17a7294e576e631561

    • SHA512

      e99feaf79b8b035a86a8dca6a5001ee276305ae80e696ab8d05fcc4a1114776056b70647214232e795297a7598f1eba7d78e3cb5aec0b82723f839832b686dd0

    • SSDEEP

      768:I9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJXSTbtFggSl5q:psq+Q1aZQuIyJp0mgA+FJ0+5q

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks