xtremerat | c925f407577f1fed2f44b968754b36040f0284c8601480d9df19e85838c82a40 | Triage

Sharing

General

Target

JaffaCakes118_0faacaebc8a0f2d3805939e0a21d5560
Size

45KB
Sample

250221-czyehszrfv
MD5

0faacaebc8a0f2d3805939e0a21d5560
SHA1

9fad08b174d05cfc61c5c66c63c655d32d4797ea
SHA256

c925f407577f1fed2f44b968754b36040f0284c8601480d9df19e85838c82a40
SHA512

a299964d53690b2c0a11130161bbe006abdd9b25eec486ea7f1646caf349fa6b2b18868efa54495b9017750b9a5b670c446925904d6ed2641ca6bdfa4d32a4fa
SSDEEP

768:NB7+tTFH90iY6W1jPmDzKgEFQXKklzIAn38hwfegw0cRzova:zCBg31jKPEFQXKkx384rkova

Score

10^/10

xtremerat discovery persistence rat spyware

Malware Config

Targets

- Target
  
  JaffaCakes118_0faacaebc8a0f2d3805939e0a21d5560
- Size
  
  45KB
- MD5
  
  0faacaebc8a0f2d3805939e0a21d5560
- SHA1
  
  9fad08b174d05cfc61c5c66c63c655d32d4797ea
- SHA256
  
  c925f407577f1fed2f44b968754b36040f0284c8601480d9df19e85838c82a40
- SHA512
  
  a299964d53690b2c0a11130161bbe006abdd9b25eec486ea7f1646caf349fa6b2b18868efa54495b9017750b9a5b670c446925904d6ed2641ca6bdfa4d32a4fa
- SSDEEP
  
  768:NB7+tTFH90iY6W1jPmDzKgEFQXKklzIAn38hwfegw0cRzova:zCBg31jKPEFQXKkx384rkova
Score

10^/10

xtremerat discovery persistence rat spyware
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspyware

behavioral2

xtremeratdiscoverypersistenceratspyware