General
-
Target
3036-8-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
Sample
240517-ktap9saf52
-
MD5
f10877836ae81ca05484735001209e9e
-
SHA1
f5b4beb51b81049c3607d0616f560028f02fad2c
-
SHA256
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4
-
SHA512
c8da456e8bf16a64a8877b87f21e81cce8175487e841315f82dc23c74e8df7ce554925a927e2fc8d349f09f242525608844cedf521e58672c7c9648ca337c1fc
-
SSDEEP
768:YSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:CsJmfO2De7prj4QHbtiEH4U9
Behavioral task
behavioral1
Sample
3036-8-0x0000000000400000-0x0000000000412000-memory.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3036-8-0x0000000000400000-0x0000000000412000-memory.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
xenorat
dns.dobiamfollollc.online
Solid_rat_nd8889g
-
delay
61000
-
install_path
appdata
-
port
1283
-
startup_name
bns
Targets
-
-
Target
3036-8-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
MD5
f10877836ae81ca05484735001209e9e
-
SHA1
f5b4beb51b81049c3607d0616f560028f02fad2c
-
SHA256
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4
-
SHA512
c8da456e8bf16a64a8877b87f21e81cce8175487e841315f82dc23c74e8df7ce554925a927e2fc8d349f09f242525608844cedf521e58672c7c9648ca337c1fc
-
SSDEEP
768:YSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:CsJmfO2De7prj4QHbtiEH4U9
Score1/10 -