General
-
Target
3024-12-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
Sample
240514-jjx75sfh95
-
MD5
6d67981d6a58cf0a3d180fe63cf344b7
-
SHA1
2ba8b4122de3de06406983427c987e31a99ce14f
-
SHA256
bb17f60608b55a7790f7f39cac7d17658ae65b7cd09c88a42105eb99b54fde8b
-
SHA512
bdb727cd281c9a6c06f35a0eda68e3dd1b3ba8113e4cd8c1a20123066c9764dbf94ced19e79dafb77060da356734d526108ca14e54951bae0b1fa32270e1ac35
-
SSDEEP
768:WSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:AsJmfO2De7prj4QHbtiEH4U9
Behavioral task
behavioral1
Sample
3024-12-0x0000000000400000-0x0000000000412000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3024-12-0x0000000000400000-0x0000000000412000-memory.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
xenorat
dns.dobiamfollollc.online
Solid_rat_nd8889g
-
delay
61000
-
install_path
appdata
-
port
1283
-
startup_name
bns
Targets
-
-
Target
3024-12-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
MD5
6d67981d6a58cf0a3d180fe63cf344b7
-
SHA1
2ba8b4122de3de06406983427c987e31a99ce14f
-
SHA256
bb17f60608b55a7790f7f39cac7d17658ae65b7cd09c88a42105eb99b54fde8b
-
SHA512
bdb727cd281c9a6c06f35a0eda68e3dd1b3ba8113e4cd8c1a20123066c9764dbf94ced19e79dafb77060da356734d526108ca14e54951bae0b1fa32270e1ac35
-
SSDEEP
768:WSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:AsJmfO2De7prj4QHbtiEH4U9
Score1/10 -