xtremerat | 95a1416e08c1c808dc0df5e093bd78479357c394af9571249cf8d315be463726 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...14.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_a1e5c6c2d9cae35d0676d5dde23b1714
Size

661KB
Sample

250408-2b1meatscz
MD5

a1e5c6c2d9cae35d0676d5dde23b1714
SHA1

464ab48b4ed098e6a7f123f58b75205ccf6d0a4b
SHA256

95a1416e08c1c808dc0df5e093bd78479357c394af9571249cf8d315be463726
SHA512

788efc803d8e9d8e933e622b74ef4fad82b8998e4c9bde6ad50d18d2592869a698344a384293e47873377b07b7d251d15555841ec4c113c81be952a6b349b4c4
SSDEEP

12288:EJa6OG0uW5wwyPImzQ/+afpnRyY9jjU82jLbQNNPdb5JvnmcTIHQqHYoZ4w57MIv:Ob90u0wwuFQZfpcYRzCL8VlJuxHQ6Yqh

Score

10^/10

xtremerat discovery persistence rat spyware upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_a1e5c6c2d9cae35d0676d5dde23b1714.exe

Resource

win10v2004-20250314-en

xtremerat discovery persistence rat spyware upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_a1e5c6c2d9cae35d0676d5dde23b1714
- Size
  
  661KB
- MD5
  
  a1e5c6c2d9cae35d0676d5dde23b1714
- SHA1
  
  464ab48b4ed098e6a7f123f58b75205ccf6d0a4b
- SHA256
  
  95a1416e08c1c808dc0df5e093bd78479357c394af9571249cf8d315be463726
- SHA512
  
  788efc803d8e9d8e933e622b74ef4fad82b8998e4c9bde6ad50d18d2592869a698344a384293e47873377b07b7d251d15555841ec4c113c81be952a6b349b4c4
- SSDEEP
  
  12288:EJa6OG0uW5wwyPImzQ/+afpnRyY9jjU82jLbQNNPdb5JvnmcTIHQqHYoZ4w57MIv:Ob90u0wwuFQZfpcYRzCL8VlJuxHQ6Yqh
Score

10^/10

xtremerat discovery persistence rat spyware upx
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspywareupx

© 2018-2025

Terms | Privacy