xtremerat | 9e6883b40fc42b99f21c778b290f75ece100e00d2852b305f3c820e2ea24a767 | Triage

Submit
Reports

Overview

overview

Static

static

4e5a43c73a...18.exe

windows7-x64

4e5a43c73a...18.exe

windows10-2004-x64

Sharing

General

Target

4e5a43c73a6a13ba1be39b1953f7a568_JaffaCakes118
Size

33KB
Sample

241016-w4hdmsvcqh
MD5

4e5a43c73a6a13ba1be39b1953f7a568
SHA1

9c4d927b16c86528ad67321ac241bae84affcc3b
SHA256

9e6883b40fc42b99f21c778b290f75ece100e00d2852b305f3c820e2ea24a767
SHA512

ec396fc953f52c5d1af44a494f0cc5bb5a8f92bbb551c3589e8c42a4d2ac04931ebfbe481648ef64dc63ad9c9a20fd0cc61373a29104b6761e79d868357c4779
SSDEEP

768:TMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rdW4pLQha:oNW71rcYDAWeoDrsEud5rd3NK

Score

10^/10

xtremerat discovery persistence rat spyware upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

4e5a43c73a6a13ba1be39b1953f7a568_JaffaCakes118.exe

Resource

win7-20240903-en

xtremerat discovery persistence rat spyware upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

4e5a43c73a6a13ba1be39b1953f7a568_JaffaCakes118.exe

Resource

win10v2004-20241007-en

xtremerat discovery persistence rat spyware upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  4e5a43c73a6a13ba1be39b1953f7a568_JaffaCakes118
- Size
  
  33KB
- MD5
  
  4e5a43c73a6a13ba1be39b1953f7a568
- SHA1
  
  9c4d927b16c86528ad67321ac241bae84affcc3b
- SHA256
  
  9e6883b40fc42b99f21c778b290f75ece100e00d2852b305f3c820e2ea24a767
- SHA512
  
  ec396fc953f52c5d1af44a494f0cc5bb5a8f92bbb551c3589e8c42a4d2ac04931ebfbe481648ef64dc63ad9c9a20fd0cc61373a29104b6761e79d868357c4779
- SSDEEP
  
  768:TMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rdW4pLQha:oNW71rcYDAWeoDrsEud5rd3NK
Score

10^/10

xtremerat discovery persistence rat spyware upx
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspywareupx

behavioral2

xtremeratdiscoverypersistenceratspywareupx

© 2018-2025

Terms | Privacy