D:\Armin\Creds\HK\New\tools\xeno-rat-1.8.7\xeno rat client\obj\Release\managing_app.pdb
General
-
Target
ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e
-
Size
43KB
-
MD5
4d4b16c29f6b45479008915939ce9c76
-
SHA1
956872cafef24917d1f5ea40ffe170f2935356a5
-
SHA256
ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e
-
SHA512
057f67f2344a3bd25fabb231a5941088c5edd91f2668d9bafc1a043f7b807fcad98fa14292a023fac4cde87e36382c8a0f2dcf41cb5047993a48f195d473aa0e
-
SSDEEP
768:WmgeBlQJ7m20Yv9pb9TbSjHcOjbqOzoofZBWkUbmYNf5E6Tjp4:WBeim25vHRTAjrCkUbmC5Z4
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
localhost
Mutex
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
port
1234
-
startup_name
nothingset
Signatures
-
Xenorat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ce06bb8fffa90967cd8256eef08282f67947467b471336f253b163976f72290e
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections