Analysis
-
max time kernel
149s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15-05-2024 18:53
Behavioral task
behavioral1
Sample
test.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
General
-
Target
test.exe
-
Size
45KB
-
MD5
42faf67435979c1245010683d8e916b5
-
SHA1
b93b780736398c6e4001c150276ccb24982ed67f
-
SHA256
eef18c81faeee1877aa9cd8d8aef18b643a434fd3da221cc724070ec863e5fcd
-
SHA512
ff0fd19b423da9c89a6729790f5f39bac4e2dd03d62ad8c8fcf9628afb7e57a58b0a4700ee8811ba6c6191390c7cf3816342852fb90fc583ba261fd4637fcd86
-
SSDEEP
768:RdhO/poiiUcjlJInvvH9Xqk5nWEZ5SbTDaJWI7CPW5R:Pw+jjgn3H9XqcnW85SbTAWIJ
Malware Config
Extracted
Family
xenorat
C2
127.0.0.1
Mutex
Xeno_rat_nd8912d
Attributes
-
delay
5000
-
install_path
nothingset
-
port
4444
-
startup_name
nothingset
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2424-0-0x0000000073FEE000-0x0000000073FEF000-memory.dmpFilesize
4KB
-
memory/2424-1-0x0000000000390000-0x00000000003A2000-memory.dmpFilesize
72KB
-
memory/2424-2-0x0000000073FE0000-0x00000000746CE000-memory.dmpFilesize
6.9MB
-
memory/2424-3-0x0000000073FE0000-0x00000000746CE000-memory.dmpFilesize
6.9MB