xtremerat | 22fa28cd596858c77072d5f5c9ad80b9b5ff262fb352b76f3d4c08e6f722b042 | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...bd.exe

windows7-x64

JaffaCakes...bd.exe

windows10-2004-x64

Resubmissions

12-01-2025 09:11

250112-k5t82swkgz 10

12-01-2025 08:53

250112-ktfaravqbt 10

Sharing

General

Target

JaffaCakes118_0a90f3594a5b1cae728dd35606cdb1bd
Size

65KB
Sample

250112-ktfaravqbt
MD5

0a90f3594a5b1cae728dd35606cdb1bd
SHA1

3a64d56521fef9b8a45ca0b7a9a628803143c25a
SHA256

22fa28cd596858c77072d5f5c9ad80b9b5ff262fb352b76f3d4c08e6f722b042
SHA512

4444dc5fd91259fee0692384ef01f1a520cd7e1f12018be0c3890056dd6928a11525f4cbe4cc860a6716bd22493c426c5f9b09f64fc0c558fc35b8b802c774f9
SSDEEP

768:P8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY01YKnA+7PoNw8zM:Xsq+QV4rObAdNoAf5UqiY+lArNwMoF5

Score

10^/10

xtremerat discovery persistence rat spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_0a90f3594a5b1cae728dd35606cdb1bd.exe

Resource

win7-20240729-en

xtremerat discovery persistence rat spyware

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_0a90f3594a5b1cae728dd35606cdb1bd.exe

Resource

win10v2004-20241007-en

xtremerat discovery persistence rat spyware

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_0a90f3594a5b1cae728dd35606cdb1bd
- Size
  
  65KB
- MD5
  
  0a90f3594a5b1cae728dd35606cdb1bd
- SHA1
  
  3a64d56521fef9b8a45ca0b7a9a628803143c25a
- SHA256
  
  22fa28cd596858c77072d5f5c9ad80b9b5ff262fb352b76f3d4c08e6f722b042
- SHA512
  
  4444dc5fd91259fee0692384ef01f1a520cd7e1f12018be0c3890056dd6928a11525f4cbe4cc860a6716bd22493c426c5f9b09f64fc0c558fc35b8b802c774f9
- SSDEEP
  
  768:P8m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY01YKnA+7PoNw8zM:Xsq+QV4rObAdNoAf5UqiY+lArNwMoF5
Score

10^/10

xtremerat discovery persistence rat spyware
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspyware

behavioral2

xtremeratdiscoverypersistenceratspyware

© 2018-2025

Terms | Privacy