General

  • Target

    55d3b824d559c9f64ae192c8e8e349d4cb049879d1b44b48007f17187c9f7018.exe

  • Size

    33KB

  • Sample

    250122-1hb2ysxjax

  • MD5

    3c6efa21e31dc37088748af3f90bd40f

  • SHA1

    9081524844743c5a679dbf32592e4f10de7035bc

  • SHA256

    55d3b824d559c9f64ae192c8e8e349d4cb049879d1b44b48007f17187c9f7018

  • SHA512

    0c3281af8b004016abc1821305b4073b842e950d9028001da76be347e19b7ed067362f58d36042b7685d81864566fd4b8cdf3c59ae4378c83e1395d81cf8cc8f

  • SSDEEP

    768:hMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgCBmXRXegg6:KNW71rcYDAWeoDrsDMV

Malware Config

Extracted

Family

xtremerat

C2

almoalem.myvnc.com

Targets

    • Target

      55d3b824d559c9f64ae192c8e8e349d4cb049879d1b44b48007f17187c9f7018.exe

    • Size

      33KB

    • MD5

      3c6efa21e31dc37088748af3f90bd40f

    • SHA1

      9081524844743c5a679dbf32592e4f10de7035bc

    • SHA256

      55d3b824d559c9f64ae192c8e8e349d4cb049879d1b44b48007f17187c9f7018

    • SHA512

      0c3281af8b004016abc1821305b4073b842e950d9028001da76be347e19b7ed067362f58d36042b7685d81864566fd4b8cdf3c59ae4378c83e1395d81cf8cc8f

    • SSDEEP

      768:hMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgCBmXRXegg6:KNW71rcYDAWeoDrsDMV

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks