Overview

overview

10

Static

static

10

Zeno.exe

windows7-x64

10

Zeno.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Zeno.exe

  • Size

    45KB

  • MD5

    2d24883f3fb3ff9ea58f372da291070a

  • SHA1

    d2fdd563387cfaaabaa681297a49f26a7ce43d0f

  • SHA256

    8fd932b34f74af94e07d3b2ed14b8a3630a30f3c19ebe987fead0e63ae2a4a9b

  • SHA512

    6ee0cbe3da9d2d88ce3269c56009217408ea6e73641f4b691b17a2903a2532347ce3666439ece77f7d868d3daa5028133dfd27f4a4beb6024e97e5ac5c32279e

  • SSDEEP

    768:SdhO/poiiUcjlJIn/sWH9Xqk5nWEZ5SbTDauuI7CPW5h:0w+jjgnPH9XqcnW85SbTDuIp

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

XenoLauncher

Attributes
  • delay

    5000

  • install_path

    temp

  • port

    4444

  • startup_name

    Discord

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zeno.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections