General

  • Target

    e6cad9fc3be60fc70fac691559392c88f7a48d990d1e4513a596b4375b50167f

  • Size

    176KB

  • Sample

    250221-jzrejayqs4

  • MD5

    0294ad6cf35095978719eea590adec2e

  • SHA1

    b388a4c5deb1a7f66ac96e204c18c2d85c4fa841

  • SHA256

    e6cad9fc3be60fc70fac691559392c88f7a48d990d1e4513a596b4375b50167f

  • SHA512

    b94bbc00e8ded95090aec8ea9a111d598d62c6ef6ec3710b693eb18cf8d8f59910bdd1206257f5f51e9363f3d64be256ba8ed51667b9f8cd36afb476f7fd320e

  • SSDEEP

    3072:+53tXz/oXBcT7JkjkstZ1uy/Z17mko9CP4n0d/stH7:+53+xcx8J5uybal9C20dE9

Malware Config

Extracted

Family

xtremerat

C2

esam2at.no-ip.biz

Targets

    • Target

      e6cad9fc3be60fc70fac691559392c88f7a48d990d1e4513a596b4375b50167f

    • Size

      176KB

    • MD5

      0294ad6cf35095978719eea590adec2e

    • SHA1

      b388a4c5deb1a7f66ac96e204c18c2d85c4fa841

    • SHA256

      e6cad9fc3be60fc70fac691559392c88f7a48d990d1e4513a596b4375b50167f

    • SHA512

      b94bbc00e8ded95090aec8ea9a111d598d62c6ef6ec3710b693eb18cf8d8f59910bdd1206257f5f51e9363f3d64be256ba8ed51667b9f8cd36afb476f7fd320e

    • SSDEEP

      3072:+53tXz/oXBcT7JkjkstZ1uy/Z17mko9CP4n0d/stH7:+53+xcx8J5uybal9C20dE9

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks