xenorat | 17933ad62f2b6534ddca94223d8525c18b3e4bccfa52b448357e421f6546a675 | Triage

Sharing

General

Target

17933ad62f2b6534ddca94223d8525c18b3e4bccfa52b448357e421f6546a675
Size

43KB
Sample

240504-zn7kdaba2s
MD5

91d6927b648b1a2dd01c49470196d515
SHA1

4d33fdb39eba97b3b9a551f1ebc2c99dc5fa9835
SHA256

17933ad62f2b6534ddca94223d8525c18b3e4bccfa52b448357e421f6546a675
SHA512

2384e1dad8084596ec0ad47e89e8df368802b6b9b4ba292c85eed03ea534ecbd03b21e159fd282cb4a61946731bb79453ba68a635527c90a6565bf650dd0e0a7
SSDEEP

768:FmgeBlQJ7m20Yv9pb9TbSjHcMempl1/Y2y2WkUbmYmPJE6Tjpp:FBeim25vHRThO6vkUbmVpZp

Score

10^/10

xenorat rat trojan

Malware Config

Extracted

Family

xenorat

C2

localhost

Mutex

testing 123123

Attributes

delay
1000
install_path
nothingset
port
1234
startup_name
nothingset

Targets

- Target
  
  17933ad62f2b6534ddca94223d8525c18b3e4bccfa52b448357e421f6546a675
- Size
  
  43KB
- MD5
  
  91d6927b648b1a2dd01c49470196d515
- SHA1
  
  4d33fdb39eba97b3b9a551f1ebc2c99dc5fa9835
- SHA256
  
  17933ad62f2b6534ddca94223d8525c18b3e4bccfa52b448357e421f6546a675
- SHA512
  
  2384e1dad8084596ec0ad47e89e8df368802b6b9b4ba292c85eed03ea534ecbd03b21e159fd282cb4a61946731bb79453ba68a635527c90a6565bf650dd0e0a7
- SSDEEP
  
  768:FmgeBlQJ7m20Yv9pb9TbSjHcMempl1/Y2y2WkUbmYmPJE6Tjpp:FBeim25vHRThO6vkUbmVpZp
Score

10^/10

xenorat rat trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xenoratrattrojan

behavioral2

xenoratrattrojan