Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
12-05-2024 19:39
General
-
Target
4b1608e8817174b23e7a8a3d14f9c300_NeikiAnalytics.exe
-
Size
28KB
-
MD5
4b1608e8817174b23e7a8a3d14f9c300
-
SHA1
0cfb0d7db8692c3061e3c63373a0e3c4f9389811
-
SHA256
1093f8595fa0c2fdee59e161eef983430af8f1f2e26545439d99b5d008b2ed8b
-
SHA512
73f8da3a811954fb30c288d38894d67c0dec49e5812937e4b859cf8f104d531fba09565e89aa32df0ff7306ab1b13c71675ac33ee7156fb957d7e8112a1fa33b
-
SSDEEP
768:GMwNCleHclp0mKWNDiA7Vgp4ybRb2rjAh:GvNUeH8KWND17VguylBh
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
localhost
Mutex
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
port
1234
-
startup_name
nothingset
Signatures
-
Detects XenoRAT malware 1 IoCs
XenoRAT is an open-source remote access tool (RAT) developed in C#.
-
XenorRat
XenorRat is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b1608e8817174b23e7a8a3d14f9c300_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4b1608e8817174b23e7a8a3d14f9c300_NeikiAnalytics.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
56KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB