Overview

overview

10

Static

static

10

2268-6-0x0...ry.exe

windows7-x64

2268-6-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2268-6-0x0000000000400000-0x0000000000412000-memory.dmp

  • Size

    72KB

  • MD5

    6d60fe1889ecc038f40cc51b3c464a56

  • SHA1

    cfcc52d097e8861f30f5d2e2fbf21b87c1d96f47

  • SHA256

    395a539b0ed185fd4a4185081496c497f278495a8836bc688d5a017eb6944440

  • SHA512

    4ceb31e3630303edad917d37686c4aee20fcf99edba0ca3f73a09a9e7d3263fca73146df93d9658d40f2e5d04765d3f2aee0c4bb4fb27a3486ed68ab1ab35bdc

  • SSDEEP

    768:+SisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:YsJmfO2De7prj4QHbtiEH4U9

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

dns.dobiamfollollc.online

Mutex

Solid_rat_nd8889g

Attributes
  • delay

    61000

  • install_path

    appdata

  • port

    1283

  • startup_name

    bns

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2268-6-0x0000000000400000-0x0000000000412000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections