xtremerat | b6884ebc7d647aa95c02bdae629fa14b3b68d90cce13007d77eb2a404096b4fb | Triage

Sharing

General

Target

afeab046acb5cc1c9d6ef44a1b0c8bc7_JaffaCakes118
Size

45KB
Sample

241129-jxxhrszlfn
MD5

afeab046acb5cc1c9d6ef44a1b0c8bc7
SHA1

7595a3e91fc71ba61819b39278b7473e81068dee
SHA256

b6884ebc7d647aa95c02bdae629fa14b3b68d90cce13007d77eb2a404096b4fb
SHA512

3aae6929148d0ef29d0984c03a5aad0556eab6a04cf3b6c31782e76f862cc532ebe55ae81e5db217fc91a9ecae7a9c703826527a456ee839664e0feaed9fabe6
SSDEEP

768:9Br+tjFY90iY6W1jwmDzKgEFQXbklM6AnH8hwfOgw08Azo5J:jyRh31jxPEFQXbkEH84blo5J

Score

10^/10

xtremerat discovery persistence rat spyware

Malware Config

Targets

- Target
  
  afeab046acb5cc1c9d6ef44a1b0c8bc7_JaffaCakes118
- Size
  
  45KB
- MD5
  
  afeab046acb5cc1c9d6ef44a1b0c8bc7
- SHA1
  
  7595a3e91fc71ba61819b39278b7473e81068dee
- SHA256
  
  b6884ebc7d647aa95c02bdae629fa14b3b68d90cce13007d77eb2a404096b4fb
- SHA512
  
  3aae6929148d0ef29d0984c03a5aad0556eab6a04cf3b6c31782e76f862cc532ebe55ae81e5db217fc91a9ecae7a9c703826527a456ee839664e0feaed9fabe6
- SSDEEP
  
  768:9Br+tjFY90iY6W1jwmDzKgEFQXbklM6AnH8hwfOgw08Azo5J:jyRh31jxPEFQXbkEH84blo5J
Score

10^/10

xtremerat persistence rat spyware discovery
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratpersistenceratspyware

behavioral2

xtremeratdiscoverypersistenceratspyware