xenorat | c346536326854641ae92bd4f9d0ede640e24a6891c4ea60b2f7d2ad7f1e747cd

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25-03-2024 00:14

Target

c346536326854641ae92bd4f9d0ede640e24a6891c4ea60b2f7d2ad7f1e747cd.exe
Size

60KB
MD5

54e74f9200fd72089b7547228ab365a5
SHA1

cc05f496406518a9fa3e8219ff432ec48104f959
SHA256

c346536326854641ae92bd4f9d0ede640e24a6891c4ea60b2f7d2ad7f1e747cd
SHA512

02fcc5c760dae05b51bf39d28fc5d443c5c6c3ca938fe3882f07ff0064fae3eb7843f446875d9ed16915fafb91d7f1662e50ae5aaded3b4fc1fc88ce7ebcdc6f
SSDEEP

768:ldhO/poiiUcjlJInvvH9Xqk5nWEZ5SbTDaJWI7CPW50TxgjrfkSfXYp:7w+jjgn3H9XqcnW85SbTAWIcTeXE

Score

10^/10

xenorat rat trojan

Family

xenorat

127.0.0.1

Mutex

Xeno_rat_nd8912d

Attributes

XenorRat
XenorRat is a remote access trojan written in C#.
trojan rat xenorat

C:\Users\Admin\AppData\Local\Temp\c346536326854641ae92bd4f9d0ede640e24a6891c4ea60b2f7d2ad7f1e747cd.exe
"C:\Users\Admin\AppData\Local\Temp\c346536326854641ae92bd4f9d0ede640e24a6891c4ea60b2f7d2ad7f1e747cd.exe"
1⤵
PID:2944

memory/2944-0-0x0000000000EE0000-0x0000000000EF6000-memory.dmp

Filesize
88KB

Download
memory/2944-1-0x0000000074400000-0x0000000074BB0000-memory.dmp

Filesize
7.7MB

Download
memory/2944-2-0x0000000005850000-0x0000000005860000-memory.dmp

Filesize
64KB

Download
memory/2944-3-0x0000000074400000-0x0000000074BB0000-memory.dmp

Filesize
7.7MB

Download
memory/2944-4-0x0000000005850000-0x0000000005860000-memory.dmp

Filesize
64KB

Download