General

  • Target

    JaffaCakes118_4272c3f46f56022f1adaf7190481e08a

  • Size

    81KB

  • Sample

    250101-bz3tkasjeq

  • MD5

    4272c3f46f56022f1adaf7190481e08a

  • SHA1

    38c483a0293820681e109744d5832d5c42181336

  • SHA256

    bca5ab9542535dae49233842e2224815463ea994bce8070c063bb87b750578b8

  • SHA512

    f9346d6796504e9555c4f1752fc761be707c0b5a038be9749f5590871bff0b7fd4fbf187a83e183db5f5ac48e74a35d3f4dea3dfd1e5f9e3f40b05074f393571

  • SSDEEP

    1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3RfefE:DqMyKdcPeXHW51ms

Malware Config

Extracted

Family

xtremerat

C2

esam2at.no-ip.biz

Targets

    • Target

      JaffaCakes118_4272c3f46f56022f1adaf7190481e08a

    • Size

      81KB

    • MD5

      4272c3f46f56022f1adaf7190481e08a

    • SHA1

      38c483a0293820681e109744d5832d5c42181336

    • SHA256

      bca5ab9542535dae49233842e2224815463ea994bce8070c063bb87b750578b8

    • SHA512

      f9346d6796504e9555c4f1752fc761be707c0b5a038be9749f5590871bff0b7fd4fbf187a83e183db5f5ac48e74a35d3f4dea3dfd1e5f9e3f40b05074f393571

    • SSDEEP

      1536:3T8qDqQ8K9MK3tGjbNwPZ6oIeXHWTl5NX3RfefE:DqMyKdcPeXHW51ms

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks