General

  • Target

    JaffaCakes118_71ab9571fd93a11f02449fb3c573109b

  • Size

    31KB

  • Sample

    250201-pjx52atpak

  • MD5

    71ab9571fd93a11f02449fb3c573109b

  • SHA1

    4fb7743cfcfa3c2a4645759fa9370359a883442e

  • SHA256

    6c08af60785111e5756f24bafc9431e1689e985623d293fe911c7375f773f5ab

  • SHA512

    659920aa8fd71eface0b143abfd23eaf31167e61ff6a501633b818c4eb22055f2e8c10889f4f3b024e4e8c5753a7b82a5c7ba9575beb02a93a4742a80e08590d

  • SSDEEP

    768:ksuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jCqS:tNW70x6ALBwfF

Malware Config

Extracted

Family

xtremerat

C2

fuckwaleed.zapto.org

Targets

    • Target

      JaffaCakes118_71ab9571fd93a11f02449fb3c573109b

    • Size

      31KB

    • MD5

      71ab9571fd93a11f02449fb3c573109b

    • SHA1

      4fb7743cfcfa3c2a4645759fa9370359a883442e

    • SHA256

      6c08af60785111e5756f24bafc9431e1689e985623d293fe911c7375f773f5ab

    • SHA512

      659920aa8fd71eface0b143abfd23eaf31167e61ff6a501633b818c4eb22055f2e8c10889f4f3b024e4e8c5753a7b82a5c7ba9575beb02a93a4742a80e08590d

    • SSDEEP

      768:ksuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jCqS:tNW70x6ALBwfF

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks