General

  • Target

    JaffaCakes118_0344d597de11cce27cfe8275067ae7c5

  • Size

    37KB

  • Sample

    250121-ka77esvnby

  • MD5

    0344d597de11cce27cfe8275067ae7c5

  • SHA1

    2d7411309129a51d8e6b59e60476f52445b90cba

  • SHA256

    16bf391f2e74d45caeab7f3b35434f8fa57150d6d25443dd005468a1da0fc677

  • SHA512

    bd970c97280994b6479f069c399ee104e3fe520581f679a3862b3a56444e19331c1d05f65b8101299f813363d932a95be29fff7373a664a04374722e0ddc55c7

  • SSDEEP

    768:HbA+7z6fLKh1PhbGa31V3m0C4NDySxN27KD917+Mf0qJG+Jx5LoI:HbSezpzV3rCqDyl7K77H0qJz

Malware Config

Extracted

Family

xtremerat

C2

koko009.tzo.net

Targets

    • Target

      JaffaCakes118_0344d597de11cce27cfe8275067ae7c5

    • Size

      37KB

    • MD5

      0344d597de11cce27cfe8275067ae7c5

    • SHA1

      2d7411309129a51d8e6b59e60476f52445b90cba

    • SHA256

      16bf391f2e74d45caeab7f3b35434f8fa57150d6d25443dd005468a1da0fc677

    • SHA512

      bd970c97280994b6479f069c399ee104e3fe520581f679a3862b3a56444e19331c1d05f65b8101299f813363d932a95be29fff7373a664a04374722e0ddc55c7

    • SSDEEP

      768:HbA+7z6fLKh1PhbGa31V3m0C4NDySxN27KD917+Mf0qJG+Jx5LoI:HbSezpzV3rCqDyl7K77H0qJz

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks