xtremerat | f2a12b039835d5c0513bb0fa1c0ca24d632fa9046bc0f622345c27174e4e2b60 | Triage

Submit
Reports

Overview

overview

Static

static

3

ce2b947885...18.exe

windows7-x64

ce2b947885...18.exe

windows10-2004-x64

Sharing

General

Target

ce2b9478856c682e1227f7ad8ec97405_JaffaCakes118
Size

279KB
Sample

241206-vxn26stqek
MD5

ce2b9478856c682e1227f7ad8ec97405
SHA1

44708de37b4b8c888a199f11baf286a1a53b1bae
SHA256

f2a12b039835d5c0513bb0fa1c0ca24d632fa9046bc0f622345c27174e4e2b60
SHA512

de68f36a3c5278d6e0ecaa15027ee0cfedc2629292c9441bde5c806a68c8a48a2ddca7b10c421da5315872b8415bbe84008a6122f294b7698610d5680fbece09
SSDEEP

3072:K0KpijvBdAmdQWUgKX/GH3m2YnHT99mJGU5zfaNN1cImYBp5C:KjwUg0+q7FU52NN1cIpBp5

Score

10^/10

xtremerat discovery persistence rat spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ce2b9478856c682e1227f7ad8ec97405_JaffaCakes118.exe

Resource

win7-20240903-en

xtremerat discovery persistence rat spyware

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

ce2b9478856c682e1227f7ad8ec97405_JaffaCakes118.exe

Resource

win10v2004-20241007-en

xtremerat discovery persistence rat spyware

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  ce2b9478856c682e1227f7ad8ec97405_JaffaCakes118
- Size
  
  279KB
- MD5
  
  ce2b9478856c682e1227f7ad8ec97405
- SHA1
  
  44708de37b4b8c888a199f11baf286a1a53b1bae
- SHA256
  
  f2a12b039835d5c0513bb0fa1c0ca24d632fa9046bc0f622345c27174e4e2b60
- SHA512
  
  de68f36a3c5278d6e0ecaa15027ee0cfedc2629292c9441bde5c806a68c8a48a2ddca7b10c421da5315872b8415bbe84008a6122f294b7698610d5680fbece09
- SSDEEP
  
  3072:K0KpijvBdAmdQWUgKX/GH3m2YnHT99mJGU5zfaNN1cImYBp5C:KjwUg0+q7FU52NN1cIpBp5
Score

10^/10

xtremerat discovery persistence rat spyware
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspyware

behavioral2

xtremeratdiscoverypersistenceratspyware

© 2018-2025

Terms | Privacy