General

  • Target

    JaffaCakes118_62bdbcf1e148fca437887f1adbfe5d96

  • Size

    33KB

  • Sample

    250102-fesv3stpfw

  • MD5

    62bdbcf1e148fca437887f1adbfe5d96

  • SHA1

    908cdf5a8d8478cc32acf8725b1856c41822e4c6

  • SHA256

    72146d983eb93ddedc00bf3a8fc0f08a941d677d3e08e9c769b4086bd2738974

  • SHA512

    55df437c8fb8234b7034c5fb3b16e091fab0f92951cafbbd81d5b8539b31f2cb42428172d312ff5cd563977aaef8cc607d4281342e263146cd1841caa0747123

  • SSDEEP

    768:VMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lltzCkBZOeu3z:eNW71rcYDAWeotvXlD+D

Malware Config

Extracted

Family

xtremerat

C2

mesn.no-ip.biz

Targets

    • Target

      JaffaCakes118_62bdbcf1e148fca437887f1adbfe5d96

    • Size

      33KB

    • MD5

      62bdbcf1e148fca437887f1adbfe5d96

    • SHA1

      908cdf5a8d8478cc32acf8725b1856c41822e4c6

    • SHA256

      72146d983eb93ddedc00bf3a8fc0f08a941d677d3e08e9c769b4086bd2738974

    • SHA512

      55df437c8fb8234b7034c5fb3b16e091fab0f92951cafbbd81d5b8539b31f2cb42428172d312ff5cd563977aaef8cc607d4281342e263146cd1841caa0747123

    • SSDEEP

      768:VMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lltzCkBZOeu3z:eNW71rcYDAWeotvXlD+D

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks