Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-05-2024 22:09
General
-
Target
710aa19585519094d9e23c69d09e9a01b49750c9799656f646777952e05282ac.exe
-
Size
28KB
-
MD5
0be0594c3e7c4fc6d229e45f646ef8eb
-
SHA1
16c88c56ffcdb18c01943291780569269b9e1208
-
SHA256
710aa19585519094d9e23c69d09e9a01b49750c9799656f646777952e05282ac
-
SHA512
5e47413ea24ec53ca4adbef2eff40fa63c8d0efb2a89c4bc143a336185f69930379ba45ccd11e0ea78ceec8e4004f30adc45f4af2baa64b9717da55531e91839
-
SSDEEP
768:GWA2jOpJyyqMMioKeSkB/14EQuRbokbjAA:DvVyqf8ejCOcA
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
localhost
Mutex
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
port
1234
-
startup_name
nothingset
Signatures
-
XenorRat
XenorRat is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\710aa19585519094d9e23c69d09e9a01b49750c9799656f646777952e05282ac.exe"C:\Users\Admin\AppData\Local\Temp\710aa19585519094d9e23c69d09e9a01b49750c9799656f646777952e05282ac.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
56KB
-
Filesize
6.9MB
-
Filesize
6.9MB