xtremerat | 02ea32d655e7fd83a61e9dd9c3585e3f53f40ff787ee39765d10878f3f1f70b2 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

JaffaCakes...ae.exe

windows7-x64

JaffaCakes...ae.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_5c9c571ab236db43c7782dfaa3eba5ae
Size

65KB
Sample

250129-3z5rps1rfn
MD5

5c9c571ab236db43c7782dfaa3eba5ae
SHA1

4f538b244898453b77c83c53c9c84682a18c12fa
SHA256

02ea32d655e7fd83a61e9dd9c3585e3f53f40ff787ee39765d10878f3f1f70b2
SHA512

a5211cee18d4cbed9d2f015550b11fd555fe9b7de129907468e0ebbe02decda5a80abcf445034b48a1dc7ee6f65888a82754844617d83cbea4a9594e07be8aaa
SSDEEP

768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY0pYKnA+7PoNwgzI:esq+QV4rObAdNoAf5UqiYmlArNwoodV

Score

10^/10

xtremerat discovery persistence rat spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_5c9c571ab236db43c7782dfaa3eba5ae.exe

Resource

win7-20240903-en

xtremerat discovery persistence rat spyware

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_5c9c571ab236db43c7782dfaa3eba5ae.exe

Resource

win10v2004-20250129-en

xtremerat discovery persistence rat spyware

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_5c9c571ab236db43c7782dfaa3eba5ae
- Size
  
  65KB
- MD5
  
  5c9c571ab236db43c7782dfaa3eba5ae
- SHA1
  
  4f538b244898453b77c83c53c9c84682a18c12fa
- SHA256
  
  02ea32d655e7fd83a61e9dd9c3585e3f53f40ff787ee39765d10878f3f1f70b2
- SHA512
  
  a5211cee18d4cbed9d2f015550b11fd555fe9b7de129907468e0ebbe02decda5a80abcf445034b48a1dc7ee6f65888a82754844617d83cbea4a9594e07be8aaa
- SSDEEP
  
  768:88m1Sq4NQErBsH1tzoisBKQI6dObAG/dqOXHsoAx5JXrUqLOY0pYKnA+7PoNwgzI:esq+QV4rObAdNoAf5UqiYmlArNwoodV
Score

10^/10

xtremerat discovery persistence rat spyware
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspyware

behavioral2

xtremeratdiscoverypersistenceratspyware

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.