General

  • Target

    JaffaCakes118_522e5414d7109bd3e20933225d1ea495

  • Size

    65KB

  • Sample

    250101-mycfrssnft

  • MD5

    522e5414d7109bd3e20933225d1ea495

  • SHA1

    a92998c19b4c83530058fc3097a7aa7a2e835107

  • SHA256

    4f7b7222540b7a30b7beb9d137a9d9ef62eea42c31c4067e16510ddc44c0e06d

  • SHA512

    f7e3c3341e50295d2fe104cfdd5327acc0a9080a11c6c474414408beaccfdb0865f9ceb2662759d27eb54c94d3ae810ff09dcc5ae9dd21eb7e834e5d790b574f

  • SSDEEP

    768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xoc:Qsq+QV4rObAdXWpf/y+7ozNwiAoIB

Malware Config

Extracted

Family

xtremerat

C2

hungerp-rat.no-ip.biz

Targets

    • Target

      JaffaCakes118_522e5414d7109bd3e20933225d1ea495

    • Size

      65KB

    • MD5

      522e5414d7109bd3e20933225d1ea495

    • SHA1

      a92998c19b4c83530058fc3097a7aa7a2e835107

    • SHA256

      4f7b7222540b7a30b7beb9d137a9d9ef62eea42c31c4067e16510ddc44c0e06d

    • SHA512

      f7e3c3341e50295d2fe104cfdd5327acc0a9080a11c6c474414408beaccfdb0865f9ceb2662759d27eb54c94d3ae810ff09dcc5ae9dd21eb7e834e5d790b574f

    • SSDEEP

      768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xoc:Qsq+QV4rObAdXWpf/y+7ozNwiAoIB

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks