xtremerat | 61a6a3c4fbe6db149776a802c5f15611160c03f6b5982c0aca702be598c8ab45 | Triage

Submit
Reports

Overview

overview

Static

static

5

65fda9bf84...18.exe

windows7-x64

65fda9bf84...18.exe

windows10-2004-x64

Sharing

General

Target

65fda9bf84ce9697651ffcdd42ac6904_JaffaCakes118
Size

68KB
Sample

241021-jddasavejh
MD5

65fda9bf84ce9697651ffcdd42ac6904
SHA1

750f3a12288f765805d2f7e7e7934852803c48dc
SHA256

61a6a3c4fbe6db149776a802c5f15611160c03f6b5982c0aca702be598c8ab45
SHA512

a83f4e1e5532c0bf353d1715e576f7b1a73e31d68d6bcead95551e438d003cd87ee41c6a7b3583e5b00d72971e498006f9dc956ecdb5191af8433090b9331dca
SSDEEP

1536:LHmqdfxUtLroiJ17edGGIhxnn8537UOA7:7mqdaxoFGh7n2Ub7

Score

10^/10

xtremerat discovery persistence rat spyware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

65fda9bf84ce9697651ffcdd42ac6904_JaffaCakes118.exe

Resource

win7-20240903-en

xtremerat discovery persistence rat spyware upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

65fda9bf84ce9697651ffcdd42ac6904_JaffaCakes118.exe

Resource

win10v2004-20241007-en

xtremerat discovery persistence rat spyware upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  65fda9bf84ce9697651ffcdd42ac6904_JaffaCakes118
- Size
  
  68KB
- MD5
  
  65fda9bf84ce9697651ffcdd42ac6904
- SHA1
  
  750f3a12288f765805d2f7e7e7934852803c48dc
- SHA256
  
  61a6a3c4fbe6db149776a802c5f15611160c03f6b5982c0aca702be598c8ab45
- SHA512
  
  a83f4e1e5532c0bf353d1715e576f7b1a73e31d68d6bcead95551e438d003cd87ee41c6a7b3583e5b00d72971e498006f9dc956ecdb5191af8433090b9331dca
- SSDEEP
  
  1536:LHmqdfxUtLroiJ17edGGIhxnn8537UOA7:7mqdaxoFGh7n2Ub7
Score

10^/10

xtremerat discovery persistence rat spyware upx
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspywareupx

behavioral2

xtremeratdiscoverypersistenceratspywareupx

© 2018-2024

Terms | Privacy