General

  • Target

    JaffaCakes118_687b0fb7b4ff87c0961ad7a347a169c5

  • Size

    1.1MB

  • Sample

    250102-1x73yaxlgz

  • MD5

    687b0fb7b4ff87c0961ad7a347a169c5

  • SHA1

    5f79997c39a214f392240570f336f381403d89d7

  • SHA256

    cfb8e373d25c3066be308e95f75d6bd1e3d0f55391143f0c1430bcdcf54ce861

  • SHA512

    b1822f80236a708c9c242f6d80b4bb82ab3df85f79165f179da0704b88c90fd0afecfdd9af0e72be15539a34510f30f43961cb875c88d647ff22ad61fb867d19

  • SSDEEP

    1536:i8qDqQMKgMK3tGjbNwPZ6CIeXHWzlyD9yD9Z:iqcXKdcNeXHWZyYX

Malware Config

Extracted

Family

xtremerat

C2

windows.sytes.net

Targets

    • Target

      JaffaCakes118_687b0fb7b4ff87c0961ad7a347a169c5

    • Size

      1.1MB

    • MD5

      687b0fb7b4ff87c0961ad7a347a169c5

    • SHA1

      5f79997c39a214f392240570f336f381403d89d7

    • SHA256

      cfb8e373d25c3066be308e95f75d6bd1e3d0f55391143f0c1430bcdcf54ce861

    • SHA512

      b1822f80236a708c9c242f6d80b4bb82ab3df85f79165f179da0704b88c90fd0afecfdd9af0e72be15539a34510f30f43961cb875c88d647ff22ad61fb867d19

    • SSDEEP

      1536:i8qDqQMKgMK3tGjbNwPZ6CIeXHWzlyD9yD9Z:iqcXKdcNeXHWZyYX

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks