Skip to content

RAT

Xtreme RAT

aka ExtRat

According to Trend MIcro, Extreme RAT (XTRAT, Xtreme Rat) is a Remote Access Trojan that can steal information.

Xtreme RAT, also known as ExtRat, is a Windows rat operated by Molerats.

Background

Trend Micro describes Extreme RAT (XTRAT, Xtreme Rat) as an information-stealing remote access trojan. In 2012 it featured in operations directed against the Israeli and Syrian governments.

As a backdoor, this family accepts a range of remote commands, including file management (downloading, uploading, and executing files), registry management (adding, deleting, querying, and modifying keys), shell command execution, machine control (shutdown and log on/off), and screen capture. It is also able to record keystrokes on compromised hosts.


Source: Malpedia (Fraunhofer FKIE).