Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Release.zip
windows10-2004-x64
1Release/pl...at.dll
windows10-2004-x64
7Release/pl...er.dll
windows10-2004-x64
Release/pl...un.dll
windows10-2004-x64
1Release/pl...nc.dll
windows10-2004-x64
1Release/pl...ab.dll
windows10-2004-x64
1Release/pl...er.dll
windows10-2004-x64
1Release/pl...ne.dll
windows10-2004-x64
1Release/pl...ne.dll
windows10-2004-x64
1Release/pl...er.dll
windows10-2004-x64
1Release/pl...er.dll
windows10-2004-x64
1Release/pl...xy.dll
windows10-2004-x64
1Release/pl...ol.dll
windows10-2004-x64
1Release/pl...ll.dll
windows10-2004-x64
1Release/pl...up.dll
windows10-2004-x64
1Release/pl...er.dll
windows10-2004-x64
1Release/pl...ss.dll
windows10-2004-x64
Release/pl...am.dll
windows10-2004-x64
1Release/st...nt.exe
windows10-2004-x64
1Release/xe...er.exe
windows10-2004-x64
1Analysis
-
max time kernel
234s -
max time network
241s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
14/12/2023, 15:24
Static task
static1
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10v2004-20231127-en
Behavioral task
behavioral2
Sample
Release/plugins/Chat.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral3
Sample
Release/plugins/File manager.dll
Resource
win10v2004-20231201-en
Behavioral task
behavioral4
Sample
Release/plugins/Fun.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral5
Sample
Release/plugins/Hvnc.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral6
Sample
Release/plugins/InfoGrab.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral7
Sample
Release/plugins/KeyLogger.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral8
Sample
Release/plugins/KeyLoggerOffline.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral9
Sample
Release/plugins/LiveMicrophone.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral10
Sample
Release/plugins/ProcessManager.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral11
Sample
Release/plugins/Registry Manager.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral12
Sample
Release/plugins/ReverseProxy.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral13
Sample
Release/plugins/ScreenControl.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral14
Sample
Release/plugins/Shell.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral15
Sample
Release/plugins/Startup.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral16
Sample
Release/plugins/SystemPower.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral17
Sample
Release/plugins/Uacbypass.dll
Resource
win10v2004-20231201-en
Behavioral task
behavioral18
Sample
Release/plugins/WebCam.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral19
Sample
Release/stub/xeno rat client.exe
Resource
win10v2004-20231130-en
Behavioral task
behavioral20
Sample
Release/xeno rat server.exe
Resource
win10v2004-20231127-en
General
-
Target
Release/xeno rat server.exe
-
Size
1.4MB
-
MD5
d94c3dffcffcf8591a8630a893deff5f
-
SHA1
820a742ee99e77c212b20bfabcf3db0809df6485
-
SHA256
b61e4d30af50474aed593ec748e4a88875a7b492a319edc2fd44b9f51b094769
-
SHA512
d9a77ef0712b4a43a2c26925613d11b8281f1811a7142da8d280aa40d893a5a49165851232d12997830a5bd29892d87e09c5ddec81799966343609029450451d
-
SSDEEP
24576:9oxgKPxvcOk0ybRlMagx7WJOi8XIwWX7kqjVnlqud+/2P+Aic1/mhdzYHzFtzo:AnxkNTRWjx7WQI3kqXfd+/9AicRac5h
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1012 xeno rat server.exe