General

  • Target

    https://github.com/moom825/xeno-rat/releases/download/1.8.7/Release.zip

  • Sample

    240422-1gqtqagf77

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

localhost

Mutex

testing 123123

Attributes
  • delay

    1000

  • install_path

    nothingset

  • port

    1234

  • startup_name

    nothingset

Targets

    • Target

      https://github.com/moom825/xeno-rat/releases/download/1.8.7/Release.zip

    Score
    10/10
    • XenorRat

      XenorRat is a remote access trojan written in C#.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks