xenorat | 2869e74463bfe1b97d8459392556c2d5f11d88e06ac25442d7f996cb900691ff | Triage

Sharing

General

Target

2869e74463bfe1b97d8459392556c2d5f11d88e06ac25442d7f996cb900691ff
Size

43KB
Sample

240507-yjv54scf5v
MD5

a5fdfe18e566e3f29337b0309a4344fc
SHA1

bc14472698ece968c161f41cd163e0fd3205e8cc
SHA256

2869e74463bfe1b97d8459392556c2d5f11d88e06ac25442d7f996cb900691ff
SHA512

a1757853687848cfd5801b255d79b596942561e11e77e9141863bd0679f9b9a3cff397c33348170d11ce5891ff12694bd31aa3ff9f5cdd89bd791716f1c585b5
SSDEEP

768:RmgeB6V9JlMxOYSVD+Wj1hsrIwK2B6/PPnFgjsjOKMUbpYmBCytijpe:RBeAJMxvSVJIY2BOP2jsnMUbpPZt2e

Score

10^/10

xenorat rat trojan

Malware Config

Extracted

Family

xenorat

C2

localhost

Mutex

testing 123123

Attributes

delay
1000
install_path
nothingset
port
1234
startup_name
nothingset

Targets

- Target
  
  2869e74463bfe1b97d8459392556c2d5f11d88e06ac25442d7f996cb900691ff
- Size
  
  43KB
- MD5
  
  a5fdfe18e566e3f29337b0309a4344fc
- SHA1
  
  bc14472698ece968c161f41cd163e0fd3205e8cc
- SHA256
  
  2869e74463bfe1b97d8459392556c2d5f11d88e06ac25442d7f996cb900691ff
- SHA512
  
  a1757853687848cfd5801b255d79b596942561e11e77e9141863bd0679f9b9a3cff397c33348170d11ce5891ff12694bd31aa3ff9f5cdd89bd791716f1c585b5
- SSDEEP
  
  768:RmgeB6V9JlMxOYSVD+Wj1hsrIwK2B6/PPnFgjsjOKMUbpYmBCytijpe:RBeAJMxvSVJIY2BOP2jsnMUbpPZt2e
Score

10^/10

xenorat rat trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xenoratrattrojan

behavioral2

xenoratrattrojan