xtremerat | 60c3208658b5a46442bf8304306e3bca26c85dedaa9b10b3cd6a9341f7c1cc8d | Triage

Submit
Reports

Overview

overview

Static

static

5

JaffaCakes...c7.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_b66e7f6133ca72bf1fd21edbd009d4c7
Size

291KB
Sample

250414-dhnpesy1ew
MD5

b66e7f6133ca72bf1fd21edbd009d4c7
SHA1

9bf33f24e88d2aa1d89f765556059d659d5d712d
SHA256

60c3208658b5a46442bf8304306e3bca26c85dedaa9b10b3cd6a9341f7c1cc8d
SHA512

ee2cb2c2192b77a4e12c182106e1f2d684d3bbe85f4ea4aa157302fa1640e7e4b6192b08582024e26ab27a563c62e785bac6805ab27c1d6f1a8aaa751de0356d
SSDEEP

6144:EYY0GlXNggK8b7XNwzkvytUre13HBmlDlPR+XHosS3BB06AlwZ:/Y0+CENwmre13H+RPR+XHG06Al

Score

10^/10

xtremerat discovery persistence rat spyware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_b66e7f6133ca72bf1fd21edbd009d4c7.exe

Resource

win10v2004-20250314-en

xtremerat discovery persistence rat spyware upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_b66e7f6133ca72bf1fd21edbd009d4c7
- Size
  
  291KB
- MD5
  
  b66e7f6133ca72bf1fd21edbd009d4c7
- SHA1
  
  9bf33f24e88d2aa1d89f765556059d659d5d712d
- SHA256
  
  60c3208658b5a46442bf8304306e3bca26c85dedaa9b10b3cd6a9341f7c1cc8d
- SHA512
  
  ee2cb2c2192b77a4e12c182106e1f2d684d3bbe85f4ea4aa157302fa1640e7e4b6192b08582024e26ab27a563c62e785bac6805ab27c1d6f1a8aaa751de0356d
- SSDEEP
  
  6144:EYY0GlXNggK8b7XNwzkvytUre13HBmlDlPR+XHosS3BB06AlwZ:/Y0+CENwmre13H+RPR+XHG06Al
Score

10^/10

xtremerat discovery persistence rat spyware upx
- Detect XtremeRAT payload
- XtremeRAT
  The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
  persistence spyware rat xtremerat
- Xtremerat family
  xtremerat
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xtremeratdiscoverypersistenceratspywareupx

© 2018-2025

Terms | Privacy