General

  • Target

    c72166ac4b741c254036fe6f10fe3cca_JaffaCakes118

  • Size

    62KB

  • Sample

    241205-lx4m7avpfk

  • MD5

    c72166ac4b741c254036fe6f10fe3cca

  • SHA1

    8568ae5628ffd5f9f7372c8884fcfbc4eb1e81e1

  • SHA256

    0950ea7b2853bc7627a8d3f6a4d08933490066fbd16854a9c3c99d4477814ec4

  • SHA512

    295929f9acd40e024cc57079c8c81711ffc2044028d901e3e1c2e2d1f5d078db1e465b1f5ee459dc2fd2e0b3d0811c3230dcb247f5791912d5d54efb5f645695

  • SSDEEP

    1536:j8qDqQMKgMK3tGjbNwPZ6CIeXHWzlHNX3U:jqcXKdcNeXHWZO

Malware Config

Extracted

Family

xtremerat

C2

updatsys.sytes.net

Targets

    • Target

      c72166ac4b741c254036fe6f10fe3cca_JaffaCakes118

    • Size

      62KB

    • MD5

      c72166ac4b741c254036fe6f10fe3cca

    • SHA1

      8568ae5628ffd5f9f7372c8884fcfbc4eb1e81e1

    • SHA256

      0950ea7b2853bc7627a8d3f6a4d08933490066fbd16854a9c3c99d4477814ec4

    • SHA512

      295929f9acd40e024cc57079c8c81711ffc2044028d901e3e1c2e2d1f5d078db1e465b1f5ee459dc2fd2e0b3d0811c3230dcb247f5791912d5d54efb5f645695

    • SSDEEP

      1536:j8qDqQMKgMK3tGjbNwPZ6CIeXHWzlHNX3U:jqcXKdcNeXHWZO

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks