General

  • Target

    8e937200db3fd38f75cd6045214ec070_JaffaCakes118

  • Size

    72KB

  • Sample

    241104-cc3eys1cnm

  • MD5

    8e937200db3fd38f75cd6045214ec070

  • SHA1

    a78fe6247d3a8d63114240ad72ce308dd5d1d228

  • SHA256

    629e5058d009bc0636338571c02f41bf160d4369c653bafa3395a8ab9c57748e

  • SHA512

    1654b79f9908ef299c9f40efb0233f0b70921cc0e49c7130a437d6685190c89b975a1a0bc8d4782e1db8a564284695e0ac6ab3339187b902c38e06b9c24fd9af

  • SSDEEP

    768:WIkfCb1fzdqS5ZpUUO1RQjjHTSnnvQA43OAFCph7SVQV/Y6GUp75bYaJu+lX51bv:Uefcu9jCv/43OAo296G6dlJmg5Tf9u8x

Malware Config

Extracted

Family

xtremerat

C2

kyfen.no-ip.biz

Targets

    • Target

      8e937200db3fd38f75cd6045214ec070_JaffaCakes118

    • Size

      72KB

    • MD5

      8e937200db3fd38f75cd6045214ec070

    • SHA1

      a78fe6247d3a8d63114240ad72ce308dd5d1d228

    • SHA256

      629e5058d009bc0636338571c02f41bf160d4369c653bafa3395a8ab9c57748e

    • SHA512

      1654b79f9908ef299c9f40efb0233f0b70921cc0e49c7130a437d6685190c89b975a1a0bc8d4782e1db8a564284695e0ac6ab3339187b902c38e06b9c24fd9af

    • SSDEEP

      768:WIkfCb1fzdqS5ZpUUO1RQjjHTSnnvQA43OAFCph7SVQV/Y6GUp75bYaJu+lX51bv:Uefcu9jCv/43OAo296G6dlJmg5Tf9u8x

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks