xenorat | de2c417b12a1868844093165b3f764e4c244d67097c16e658e7e7837889b4373 | Triage

Sharing

General

Target

wavepublicbeta.exe
Size

45KB
Sample

240530-c91bvsbg3v
MD5

4186d43679d969e99c418e70d809a847
SHA1

bc4e6d7fa8bac30f2740f998b89f93ae70796c16
SHA256

de2c417b12a1868844093165b3f764e4c244d67097c16e658e7e7837889b4373
SHA512

d13476da1c1c1ef43196496b81a18b53743a340457a57e17898d0af7004bc6bcf1692273776b615d5e6e6695343b7fd26765561e2998d7b9fae11aed2e178347
SSDEEP

768:FdhO/poiiUcjlJInBVH9Xqk5nWEZ5SbTDaSuI7CPW5N:bw+jjgnXH9XqcnW85SbTnuIl

Score

10^/10

xenorat rat trojan

Malware Config

Extracted

Family

xenorat

C2

david-login.gl.at.ply.gg

Mutex

Xeno_rat_nd8912d

Attributes

delay
5000
install_path
nothingset
port
54479
startup_name
nothingset

Targets

- Target
  
  wavepublicbeta.exe
- Size
  
  45KB
- MD5
  
  4186d43679d969e99c418e70d809a847
- SHA1
  
  bc4e6d7fa8bac30f2740f998b89f93ae70796c16
- SHA256
  
  de2c417b12a1868844093165b3f764e4c244d67097c16e658e7e7837889b4373
- SHA512
  
  d13476da1c1c1ef43196496b81a18b53743a340457a57e17898d0af7004bc6bcf1692273776b615d5e6e6695343b7fd26765561e2998d7b9fae11aed2e178347
- SSDEEP
  
  768:FdhO/poiiUcjlJInBVH9Xqk5nWEZ5SbTDaSuI7CPW5N:bw+jjgnXH9XqcnW85SbTnuIl
Score

10^/10

xenorat rat trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xenoratrattrojan