Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
05-05-2024 04:30
General
-
Target
ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e.exe
-
Size
43KB
-
MD5
4d4b16c29f6b45479008915939ce9c76
-
SHA1
956872cafef24917d1f5ea40ffe170f2935356a5
-
SHA256
ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e
-
SHA512
057f67f2344a3bd25fabb231a5941088c5edd91f2668d9bafc1a043f7b807fcad98fa14292a023fac4cde87e36382c8a0f2dcf41cb5047993a48f195d473aa0e
-
SSDEEP
768:WmgeBlQJ7m20Yv9pb9TbSjHcOjbqOzoofZBWkUbmYNf5E6Tjp4:WBeim25vHRTAjrCkUbmC5Z4
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
localhost
Mutex
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
port
1234
-
startup_name
nothingset
Signatures
-
XenorRat
XenorRat is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e.exe"C:\Users\Admin\AppData\Local\Temp\ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB