General

  • Target

    b0d3f787862689806861232beb1f9eab_JaffaCakes118

  • Size

    62KB

  • Sample

    241129-m6n5jawrfl

  • MD5

    b0d3f787862689806861232beb1f9eab

  • SHA1

    3f5d02b8f96b69f3093655eb66d40fb8cc2b396e

  • SHA256

    f48162bcc42ee49a7a7f88e9c862b4912ba540c9741e568db892d3142b51e1bf

  • SHA512

    e1279a12dd7bab347c8fb70675d2dcadbaca82943b877ce2185055173d82754d537f86d34c7d83323033388100001108b5306b5f903f97234098084f8db98086

  • SSDEEP

    1536:OT8qDqQdUgMK3tGjbNwPZ6dIeXHWzl5NX35:sqLXKdcQeXHWZ1

Malware Config

Extracted

Family

xtremerat

C2

blackdevil2011.no-ip.biz

Targets

    • Target

      b0d3f787862689806861232beb1f9eab_JaffaCakes118

    • Size

      62KB

    • MD5

      b0d3f787862689806861232beb1f9eab

    • SHA1

      3f5d02b8f96b69f3093655eb66d40fb8cc2b396e

    • SHA256

      f48162bcc42ee49a7a7f88e9c862b4912ba540c9741e568db892d3142b51e1bf

    • SHA512

      e1279a12dd7bab347c8fb70675d2dcadbaca82943b877ce2185055173d82754d537f86d34c7d83323033388100001108b5306b5f903f97234098084f8db98086

    • SSDEEP

      1536:OT8qDqQdUgMK3tGjbNwPZ6dIeXHWzl5NX35:sqLXKdcQeXHWZ1

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks