xtremerat | 3107639ca9b1de41d3e71567ca8eeba59572238693ede18e946e0c30f311a507 | Triage

Sharing

General

Target

e52b2d0f3f65e3bf69f19a0612af211e_JaffaCakes118
Size

45KB
Sample

241212-hhfq2atlh1
MD5

e52b2d0f3f65e3bf69f19a0612af211e
SHA1

ada248ae7c3f1f280233d8dbd65dea2081e4fa37
SHA256

3107639ca9b1de41d3e71567ca8eeba59572238693ede18e946e0c30f311a507
SHA512

debf9665b7841975a637367bd885270f0eeb6a073137bf1313c5b57c541fe747cfd6a42601b096765891daf95702ed6a3566f4af0b45efbb706694d78aa6b188
SSDEEP

768:2BM+tjFY9BRiY6W1jAsDzKgEFQZ3klYrAnsPhwfugf08Czo5J:aHR+31jjPEFQZ3kZsP4gXo5J

Score

10^/10

xtremerat discovery persistence rat spyware

Malware Config

Targets

- Target
  
  e52b2d0f3f65e3bf69f19a0612af211e_JaffaCakes118
- Size
  
  45KB
- MD5
  
  e52b2d0f3f65e3bf69f19a0612af211e
- SHA1
  
  ada248ae7c3f1f280233d8dbd65dea2081e4fa37
- SHA256
  
  3107639ca9b1de41d3e71567ca8eeba59572238693ede18e946e0c30f311a507
- SHA512
  
  debf9665b7841975a637367bd885270f0eeb6a073137bf1313c5b57c541fe747cfd6a42601b096765891daf95702ed6a3566f4af0b45efbb706694d78aa6b188
- SSDEEP
  
  768:2BM+tjFY9BRiY6W1jAsDzKgEFQZ3klYrAnsPhwfugf08Czo5J:aHR+31jjPEFQZ3kZsP4gXo5J
Score

10^/10

xtremerat persistence rat spyware discovery
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratpersistenceratspyware

behavioral2