General

  • Target
    WavePreTest.rar
  • Size 12.5MB
  • Sample240530-dppv3adc76
  • SHA256 a2e63c25a58536a0d1b34464e70cd41ed0a3668455392bbc054059ebbfc0c3e2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • xenorat

C2
  • david-login.gl.at.ply.gg

Mutex
  • Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    54479

  • startup_name

    nothingset

Targets

    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/cookie/README.md
    • Size 11KB
    • SHA256 ba8b36c7d860d6ef37887b6ef496a486e91aefe5229f65157cc8b44725b9bec5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/cookie/index.js
    • Size 5KB
    • SHA256 9fd02358eabdf6c27b388dfdff94061655620a352253bfc5b01ee4cc30ca36b5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/README.md
    • Size 17KB
    • SHA256 cda3dbd285a2b65894758565a565e7bc2e7c3696225af7b5bd01454240df0aea
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/karma.conf.js
    • Size 1KB
    • SHA256 2430869adb61a5e24a3612110a9b49a948e6db43ab7e947c003a9c19c478e609
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/node.js
    • Size 40B
    • SHA256 996b381f353555cb172ebb2802bb2a7323442ff67b7b530cc26834058d7f31a2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/src/browser.js
    • Size 4KB
    • SHA256 0144ab6a52b9330c567de11a5c3a4aea35cdac47a4c106482aa24ae8054cdc6f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/src/debug.js
    • Size 4KB
    • SHA256 d8d1c1d6c387ab67c3f28d78fd0b20b9becd69442db9d3efe110ca464b509c8a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/src/index.js
    • Size 263B
    • SHA256 9a34fedeb2d269c46ed94e6f13039eb0d16d866dd460ec66fa3acd78122fa9fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/src/inspector-log.js
    • Size 373B
    • SHA256 949ae67ec1b655694f83dce57d47d9d77234f9e7d698616932a90e69c7afee91
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/debug/src/node.js
    • Size 5KB
    • SHA256 a3e83594a4ce88997e2e4fc66bc942b17b9d736290ad62560c7f09d6d0989ad0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/define-data-property/README.md
    • Size 2KB
    • SHA256 72ddfa32f732f61479cfb34852cb0f57162bc3037a97bf812c4e42679b3ff0b9
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/define-data-property/index.js
    • Size 2KB
    • SHA256 e34746e8c69bbf6ba2182b7362e9c4dc5fb3c19cace48091781ae967370bc065
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/define-data-property/test/index.js
    • Size 10KB
    • SHA256 db68bc8e54487d027c9699f4b6df2df865386de6f2b738619c7c6431c919767d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/depd/Readme.md
    • Size 9KB
    • SHA256 11deb26eafa25a465ffb8a8e3c28195eb40e679fda52b760132dbe9c9b21fb5c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/depd/index.js
    • Size 10KB
    • SHA256 4d587a5662e20a7bb9bfe6555afe5987e1b80303a819b447394f37a93297ee91
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/depd/lib/browser/index.js
    • Size 1KB
    • SHA256 10b4d4a4e9d14e9e6a5ab7ced64405ef90e6bec94d479a8e223cbba88828ad79
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/destroy/README.md
    • Size 2KB
    • SHA256 80f720db998d4728565126ea1d4b96c5248d35c2e53032d23692ce3930de69c8
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/destroy/index.js
    • Size 4KB
    • SHA256 b54f50db059987726ce2bdadca5d66a1e3ceef183aa5f43ce61aa53f05c36cb7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/encodeurl/README.md
    • Size 3KB
    • SHA256 c034db4c4433ac44bbc3ba626d1d2d1b02a6b6b76e0a8c92b6760dae39c5c59a
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/encodeurl/index.js
    • Size 1KB
    • SHA256 1d0a4e941c1504dcd9bc6cfbb77f7b44d93e56a29cba6f2ccebd78d501a51c16
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-define-property/index.js
    • Size 358B
    • SHA256 9c4b9a7edafeb02d872b9ad6258154311fd4f43cdf719e2de736973c016219d9
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-define-property/test/index.js
    • Size 1KB
    • SHA256 643be90198baf64c2a766c7c373ae0bebbf5f8717ed60d82437b5807cbde1ca4
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/eval.js
    • Size 75B
    • SHA256 d3161a97f162b483206e9849e41bb17fd54166810c76ebaa1df068133e54caae
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/index.js
    • Size 66B
    • SHA256 28fee350e89561019cf27ea37a313b4b4995f521fd087198fa235a8f135962de
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/range.js
    • Size 77B
    • SHA256 e376220f3a0226bd5b09b6d5a1411bbac274db8d2d9f7eb723142b7e676374be
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/ref.js
    • Size 79B
    • SHA256 31945f1740a0a2143fb8c38943afc6cce5de5ba6fab7af42d17b7874a19a0900
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/syntax.js
    • Size 79B
    • SHA256 56574ecd3eb54c06efd319080cc8923992791e430c914520b85e92c2f5e373f5
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/test/index.js
    • Size 356B
    • SHA256 14e2b88a10618ac3947289f93011dcfc5a2c27fcb585f453f99de8ee739185f8
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/type.js
    • Size 75B
    • SHA256 c71b2f41c15edb3824f50dd24df900495c8caaba5b6e9a80851b82bb2309827b
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/es-errors/uri.js
    • Size 73B
    • SHA256 e1e5591bde037a2ffeda822fa03fac22ff7c93c7b269ed9adf1cbea0e21614b0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/escape-html/Readme.md
    • Size 707B
    • SHA256 86530565532ede3efb547e89694bd94cd384c6a4a6ce071afecb3381dfb2ef22
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      WavePreTest/WavePreTest/Wave.Dir/Monaco/fileaccess/node_modules/escape-html/index.js
    • Size 1KB
    • SHA256 42a7f91883d0c5ce9292dda4e017e1f8664d34b09276d89fb6f3859c29d1ca9b
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

themidaxenorat
Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10