General

  • Target

    JaffaCakes118_2e175e841663f5fd7138833b159bd47e

  • Size

    135KB

  • Sample

    250113-yk45eawjg1

  • MD5

    2e175e841663f5fd7138833b159bd47e

  • SHA1

    72b76711821c01697768d682fb37ba6f38db6bc0

  • SHA256

    16c16785928ef5752c4c1ead3f5912cdeb894cc9ebfc5ba2a19dd80e85a415c0

  • SHA512

    525edc153b8ef362e185e2e124eada48e152e6e3ce0ccc7b6e9da72a9753e23fbd9409a0bc6186744304f7a7e82598a658ff082dd8e24a026b3c0e0ea431aba0

  • SSDEEP

    768:ijups9Xmn9Gq3MQvPJrsiTQ0isa6u/g37U5knjxwbsvwK:hiWnw2bxG0is2/1ejMY

Malware Config

Extracted

Family

xtremerat

C2

avic.zapto.org

Targets

    • Target

      JaffaCakes118_2e175e841663f5fd7138833b159bd47e

    • Size

      135KB

    • MD5

      2e175e841663f5fd7138833b159bd47e

    • SHA1

      72b76711821c01697768d682fb37ba6f38db6bc0

    • SHA256

      16c16785928ef5752c4c1ead3f5912cdeb894cc9ebfc5ba2a19dd80e85a415c0

    • SHA512

      525edc153b8ef362e185e2e124eada48e152e6e3ce0ccc7b6e9da72a9753e23fbd9409a0bc6186744304f7a7e82598a658ff082dd8e24a026b3c0e0ea431aba0

    • SSDEEP

      768:ijups9Xmn9Gq3MQvPJrsiTQ0isa6u/g37U5knjxwbsvwK:hiWnw2bxG0is2/1ejMY

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks