General

  • Target

    9b1c6545f194eca59176e4422c552b60_JaffaCakes118

  • Size

    79KB

  • Sample

    241125-nakmxatnez

  • MD5

    9b1c6545f194eca59176e4422c552b60

  • SHA1

    934b4f8810aeeedc90bfaaa85971e7352497015c

  • SHA256

    cd58bb7983fa8ae067b4ef1707f8fbbe1172a390641de3817de71421563cbe61

  • SHA512

    d861d4ddf58f6bb9fec1d6bc4c292c90dd6648294effaac8477073b420faef0c9dba722b162babdd6ea5eca4b3954faa899e8d60a2d7d31082b6e22746f3a03f

  • SSDEEP

    1536:7oheWGJmqdfxUtLQrciTxoPvcm/tgDi7sw9ZW:7oh8mqdaerh1oPvn1cShW

Malware Config

Extracted

Family

xtremerat

C2

khdt1.zapto.org

Targets

    • Target

      9b1c6545f194eca59176e4422c552b60_JaffaCakes118

    • Size

      79KB

    • MD5

      9b1c6545f194eca59176e4422c552b60

    • SHA1

      934b4f8810aeeedc90bfaaa85971e7352497015c

    • SHA256

      cd58bb7983fa8ae067b4ef1707f8fbbe1172a390641de3817de71421563cbe61

    • SHA512

      d861d4ddf58f6bb9fec1d6bc4c292c90dd6648294effaac8477073b420faef0c9dba722b162babdd6ea5eca4b3954faa899e8d60a2d7d31082b6e22746f3a03f

    • SSDEEP

      1536:7oheWGJmqdfxUtLQrciTxoPvcm/tgDi7sw9ZW:7oh8mqdaerh1oPvn1cShW

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks