General

  • Target

    JaffaCakes118_27b76f577e28c1d837ff326b8d38cd9e

  • Size

    65KB

  • Sample

    250125-drqkdavjdp

  • MD5

    27b76f577e28c1d837ff326b8d38cd9e

  • SHA1

    6026ddebd92a2155820918024c813970dbb1017f

  • SHA256

    51c1e88aebc5bd1f7ca2652f5f290b7417102096a0a6d6a7f92b13027f02bef2

  • SHA512

    f140feb5f86d3f18885effcc5efefae461b606ceb6479e09de900deb374144718612c55d80a87107b30f7e1ff86d337109752fcac762719a85dbfc648de69fb9

  • SSDEEP

    768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoT:Qsq+QV4rObAdXWpf/y+7ozNwiejo/Z

Malware Config

Extracted

Family

xtremerat

C2

angham.no-ip.biz

Targets

    • Target

      JaffaCakes118_27b76f577e28c1d837ff326b8d38cd9e

    • Size

      65KB

    • MD5

      27b76f577e28c1d837ff326b8d38cd9e

    • SHA1

      6026ddebd92a2155820918024c813970dbb1017f

    • SHA256

      51c1e88aebc5bd1f7ca2652f5f290b7417102096a0a6d6a7f92b13027f02bef2

    • SHA512

      f140feb5f86d3f18885effcc5efefae461b606ceb6479e09de900deb374144718612c55d80a87107b30f7e1ff86d337109752fcac762719a85dbfc648de69fb9

    • SSDEEP

      768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoT:Qsq+QV4rObAdXWpf/y+7ozNwiejo/Z

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks