xtremerat | 2e1e4efc1bf6491f49d159a3814e6b6b65b07fb6c890d6125aeef17c9744f58b | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...f3.exe

windows7-x64

JaffaCakes...f3.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_fad27522f88d833604c58cda87c32bf3
Size

33KB
Sample

250215-vvncvsvlcq
MD5

fad27522f88d833604c58cda87c32bf3
SHA1

7bf839cd135125c8fee42fac5707af1ce2b08f23
SHA256

2e1e4efc1bf6491f49d159a3814e6b6b65b07fb6c890d6125aeef17c9744f58b
SHA512

bfbdd4d8fe53bf1601e7a4b63ff2f353a539c22e71e63b70b372f578045ba44e7d32b58c603fb4b86bb0a4d59b4ba295893905da947563c2c62e0d12bbb84d22
SSDEEP

768:wMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rZHUwbtLNO:5NW71rcYDAWeoDrsEud5rZ0w5N

Score

10^/10

xtremerat discovery persistence rat spyware upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_fad27522f88d833604c58cda87c32bf3.exe

Resource

win7-20240903-en

xtremerat discovery persistence rat spyware upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_fad27522f88d833604c58cda87c32bf3.exe

Resource

win10v2004-20250211-en

xtremerat discovery persistence rat spyware upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_fad27522f88d833604c58cda87c32bf3
- Size
  
  33KB
- MD5
  
  fad27522f88d833604c58cda87c32bf3
- SHA1
  
  7bf839cd135125c8fee42fac5707af1ce2b08f23
- SHA256
  
  2e1e4efc1bf6491f49d159a3814e6b6b65b07fb6c890d6125aeef17c9744f58b
- SHA512
  
  bfbdd4d8fe53bf1601e7a4b63ff2f353a539c22e71e63b70b372f578045ba44e7d32b58c603fb4b86bb0a4d59b4ba295893905da947563c2c62e0d12bbb84d22
- SSDEEP
  
  768:wMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rZHUwbtLNO:5NW71rcYDAWeoDrsEud5rZ0w5N
Score

10^/10

xtremerat discovery persistence rat spyware upx
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
- Downloads MZ/PE file
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspywareupx

behavioral2

xtremeratdiscoverypersistenceratspywareupx

© 2018-2025

Terms | Privacy