xtremerat | c22ad479f59dae87d2c2b2f25cdb8858eb2574be4defd53a5bd2d588ea80caa9 | Triage

Submit
Reports

Overview

overview

Static

static

7

6f792bee6b...18.exe

windows7-x64

6f792bee6b...18.exe

windows10-2004-x64

3

Sharing

General

Target

6f792bee6b6bb7f17187d7e7050959b4_JaffaCakes118
Size

1.7MB
Sample

241023-r5vcdawajc
MD5

6f792bee6b6bb7f17187d7e7050959b4
SHA1

9435583a5ea8992b60a7a5b0b4a54ed7ab145b0e
SHA256

c22ad479f59dae87d2c2b2f25cdb8858eb2574be4defd53a5bd2d588ea80caa9
SHA512

b39d46287b6c5e20ea0975bbcfb2229a4b436612569180eb2fe3e5e43fc04706bdff6ad9620749f19a3e74fe6459f854f8d9fc7f47d14fd2b09573089ef6dc5f
SSDEEP

24576:6ys/iDSL6EMcRDJhe9R6U45vffYz3UPvbwNI0jFYM917cz1y5lEldeViOAoF0RN0:/gL6EMsd523UHb70xh913ceOoF00

Score

10^/10

xtremerat discovery persistence rat spyware themida

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6f792bee6b6bb7f17187d7e7050959b4_JaffaCakes118.exe

Resource

win7-20241010-en

xtremerat discovery persistence rat spyware themida

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

6f792bee6b6bb7f17187d7e7050959b4_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  6f792bee6b6bb7f17187d7e7050959b4_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  6f792bee6b6bb7f17187d7e7050959b4
- SHA1
  
  9435583a5ea8992b60a7a5b0b4a54ed7ab145b0e
- SHA256
  
  c22ad479f59dae87d2c2b2f25cdb8858eb2574be4defd53a5bd2d588ea80caa9
- SHA512
  
  b39d46287b6c5e20ea0975bbcfb2229a4b436612569180eb2fe3e5e43fc04706bdff6ad9620749f19a3e74fe6459f854f8d9fc7f47d14fd2b09573089ef6dc5f
- SSDEEP
  
  24576:6ys/iDSL6EMcRDJhe9R6U45vffYz3UPvbwNI0jFYM917cz1y5lEldeViOAoF0RN0:/gL6EMsd523UHb70xh913ceOoF00
Score

10^/10

xtremerat discovery persistence rat spyware themida
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspywarethemida

behavioral2

© 2018-2024

Terms | Privacy