General

  • Target

    JaffaCakes118_6203cb9f0390bd5833501a42daed0946

  • Size

    74KB

  • Sample

    250102-clgjvazmen

  • MD5

    6203cb9f0390bd5833501a42daed0946

  • SHA1

    e7ebcc93342d54f19c19c2346c0731e065805d77

  • SHA256

    f0f9937f25ff59969c71b20af6e7c52c7456aafaea0a49fb001ffb35d70ce37a

  • SHA512

    3c71321ddf30388ccd1d12ddf7c7e0e42c196ee15878a3c5381bf16afcec92fcdccbb7fc07e80cc3e85ac35f07ddbcb276077dfe29fa60228e723cee9ac43076

  • SSDEEP

    1536:yaaVdjxUt680GzdKsttHMwcftt6nb5Uffosx/5fiW2jcJm:faVd+f0WJMwclt6nb5uowfP2jD

Malware Config

Extracted

Family

xtremerat

C2

bechiai.no-ip.biz

Targets

    • Target

      JaffaCakes118_6203cb9f0390bd5833501a42daed0946

    • Size

      74KB

    • MD5

      6203cb9f0390bd5833501a42daed0946

    • SHA1

      e7ebcc93342d54f19c19c2346c0731e065805d77

    • SHA256

      f0f9937f25ff59969c71b20af6e7c52c7456aafaea0a49fb001ffb35d70ce37a

    • SHA512

      3c71321ddf30388ccd1d12ddf7c7e0e42c196ee15878a3c5381bf16afcec92fcdccbb7fc07e80cc3e85ac35f07ddbcb276077dfe29fa60228e723cee9ac43076

    • SSDEEP

      1536:yaaVdjxUt680GzdKsttHMwcftt6nb5Uffosx/5fiW2jcJm:faVd+f0WJMwclt6nb5uowfP2jD

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks