General
-
Target
2516-16-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
Sample
240517-ksz9jaac5s
-
MD5
850266b9d6081cb7b6490eb1fb56635a
-
SHA1
cf34a7532144f117a74c6286f0c006e980999b3d
-
SHA256
3e47ae31bb60d2bc7d79a93a69381832fa310ec032ef59452e58f2ce177a188c
-
SHA512
2809d3326832578c2b27915ee74d85c0f576084ab47cf96f752fa9ee443e7c366a72dd9398ddb026ee78542601447e0861d85836938c654159d6bb487ea598f1
-
SSDEEP
768:BSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:5sJmfO2De7prj4QHbtiEH4U9
Behavioral task
behavioral1
Sample
2516-16-0x0000000000400000-0x0000000000412000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2516-16-0x0000000000400000-0x0000000000412000-memory.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
xenorat
dns.dobiamfollollc.online
Solid_rat_nd8889g
-
delay
61000
-
install_path
appdata
-
port
1283
-
startup_name
bns
Targets
-
-
Target
2516-16-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
MD5
850266b9d6081cb7b6490eb1fb56635a
-
SHA1
cf34a7532144f117a74c6286f0c006e980999b3d
-
SHA256
3e47ae31bb60d2bc7d79a93a69381832fa310ec032ef59452e58f2ce177a188c
-
SHA512
2809d3326832578c2b27915ee74d85c0f576084ab47cf96f752fa9ee443e7c366a72dd9398ddb026ee78542601447e0861d85836938c654159d6bb487ea598f1
-
SSDEEP
768:BSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:5sJmfO2De7prj4QHbtiEH4U9
Score1/10 -