xenorat | 1d183e4da760e083cbeafcf4fcd543723693a1e97a84963bbd29a939b36baf06 | Triage

Sharing

General

Target

1d183e4da760e083cbeafcf4fcd543723693a1e97a84963bbd29a939b36baf06
Size

45KB
Sample

240422-x8hewafc4x
MD5

e0ccca94f41d885ca4b6e59fff0199ae
SHA1

b010f0ae81db0de2828b1c4df1e1dfc476a1b272
SHA256

1d183e4da760e083cbeafcf4fcd543723693a1e97a84963bbd29a939b36baf06
SHA512

55a76daf49b5c491e6db9d008dd266f7a13006b1f73b62fb47b6c85743dd703a7b9eef51484ca57a41193659b72ad536ba3c17b32e168d2eb1ba43e2428a603a
SSDEEP

768:tdhO/poiiUcjlJIn57ElmH9Xqk5nWEZ5SbTDakuI7CPW5F:jw+jjgnFElmH9XqcnW85SbTBuIN

Score

10^/10

xenorat rat trojan

Malware Config

Extracted

Family

xenorat

C2

192.168.1.13

Mutex

Xeno_rat_nd8912d

Attributes

delay
5000
install_path
nothingset
port
4444
startup_name
nothingset

Targets

- Target
  
  1d183e4da760e083cbeafcf4fcd543723693a1e97a84963bbd29a939b36baf06
- Size
  
  45KB
- MD5
  
  e0ccca94f41d885ca4b6e59fff0199ae
- SHA1
  
  b010f0ae81db0de2828b1c4df1e1dfc476a1b272
- SHA256
  
  1d183e4da760e083cbeafcf4fcd543723693a1e97a84963bbd29a939b36baf06
- SHA512
  
  55a76daf49b5c491e6db9d008dd266f7a13006b1f73b62fb47b6c85743dd703a7b9eef51484ca57a41193659b72ad536ba3c17b32e168d2eb1ba43e2428a603a
- SSDEEP
  
  768:tdhO/poiiUcjlJIn57ElmH9Xqk5nWEZ5SbTDakuI7CPW5F:jw+jjgnFElmH9XqcnW85SbTBuIN
Score

10^/10

xenorat rat trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xenoratrattrojan

behavioral2

xenoratrattrojan