Overview

overview

10

Static

static

10

Feomrious.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Feomrious.exe

  • Size

    45KB

  • MD5

    81a2b1b50d59b05f1422300684e21016

  • SHA1

    b5d3fe5e4c0397fddc23593eee722bc6d822ef72

  • SHA256

    07a1819c88e46a12803c2e9e27fea8fcae79dac03b4b009789f2ffcf48600128

  • SHA512

    69b1b18e5139f65e1aaf59c3cfcdfb2ae88c9ba75da70c885d44fb305d5f85651fc413e7b6d30883726f6e3cbc8fb740d793436bfaa6a7d480b3ab281312c4af

  • SSDEEP

    768:SdhO/poiiUcjlJInQlH9Xqk5nWEZ5SbTDaJWI7CPW5h:0w+jjgngH9XqcnW85SbTAWI5

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

5.tcp.eu.ngrok.io

Mutex

Xeno_rat_nd8912d

Attributes
  • install_path

    nothingset

  • port

    14762

  • startup_name

    nothingset

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Feomrious.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections