General
-
Target
https://we.tl/t-z7zfaCXd1p
-
Sample
240415-s37elacc4t
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
86.121.5.213
Mutex
svchost
Attributes
-
delay
5000
-
install_path
temp
-
port
5243
-
startup_name
Realtek HD Audio
Targets
-
-
Target
https://we.tl/t-z7zfaCXd1p
Score10/10-
XenorRat
XenorRat is a remote access trojan written in C#.
-
Downloads MZ/PE file
-
Executes dropped EXE
-