General

  • Target

    LoaderAsset.bin.zip

  • Size

    18KB

  • MD5

    dafbe6093524b436595f28a6fe983509

  • SHA1

    d7c966e42e821582fc9b77651a7da1f3826cb515

  • SHA256

    ea185287426ba75b8934f7a60944dab61a0d806382f6484417a9121a0d4ab088

  • SHA512

    4a3ee783081e9d060e4cc629b2c4092acb8543b5386df66897d7e26931c0a3bc351a3627efbeab19cba2316d110178f37f084b4c76a64c079eeae7549d33985f

  • SSDEEP

    384:FcH5gNEyP/I3F5uhAf4Xowg1t9EFY2GdcstgYRGvNemm:eH51yP/I3FwbowU9j2Utg7emm

Score
10/10

Malware Config

Signatures

  • Detects XenoRAT malware 1 IoCs

    XenoRAT is an open-source remote access tool (RAT) developed in C#.

  • Xenorat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LoaderAsset.bin.zip
    .zip

    Password: infected

  • LoaderAsset.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections