Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
05-05-2024 00:30
General
-
Target
6d17c1806be4d9832e6e5338f75d5cb6b378a0a3575e49737015a97a82d8b7ba.exe
-
Size
42KB
-
MD5
0c57b1c60b932bbf4da550529ca05f45
-
SHA1
a29674e09d3fa3a92a27bb52d89a97849f24e469
-
SHA256
6d17c1806be4d9832e6e5338f75d5cb6b378a0a3575e49737015a97a82d8b7ba
-
SHA512
501bcc98af5b322ff5c5e16d8426c969054a9bf3104b90b7f39e2e0d76c1327f5ce73abb4805a4059ac513a34a5382e2a79494c4a8fd50889e4a3e4fbe981d0e
-
SSDEEP
768:omgegwHE3MrhLHWB+MP0RSii/tOsWp+Y9AUkd8EMqGfA95GVjpG:oBe1EcrRHuGN54ukd8EMqbmTG
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
localhost
Mutex
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
port
1234
-
startup_name
nothingset
Signatures
-
XenorRat
XenorRat is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d17c1806be4d9832e6e5338f75d5cb6b378a0a3575e49737015a97a82d8b7ba.exe"C:\Users\Admin\AppData\Local\Temp\6d17c1806be4d9832e6e5338f75d5cb6b378a0a3575e49737015a97a82d8b7ba.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB