xenorat | 142f3ea8512bcaa91dd912b133d5b009179ef1b7d59c9320a1f15f53deefbbcc | Triage

Sharing

General

Target

kolrad v3.exe
Size

45KB
Sample

240605-g5eltagd4x
MD5

9ac1e417bde8a3df3694d531c1b7fa32
SHA1

ee2f2f17a29697deab7b13199b0423fa364031fa
SHA256

142f3ea8512bcaa91dd912b133d5b009179ef1b7d59c9320a1f15f53deefbbcc
SHA512

50d53f87c01e1300e67f47fb33b91ca1993b46fcc26d9b0ea4b27871adc94f0febcd2a3ae6ba0e35ee8330dcb1ec5673242b1d08f017183dc34551eb1fbe4f17
SSDEEP

768:tdhO/poiiUcjlJIn17ElmH9Xqk5nWEZ5SbTDafuI7CPW55:jw+jjgn5ElmH9XqcnW85SbTquIh

Score

10^/10

xenorat rat trojan

Malware Config

Extracted

Family

xenorat

C2

192.168.1.36

Mutex

Xeno_rat_nd8912d

Attributes

delay
5000
install_path
nothingset
port
1605
startup_name
nothingset

Targets

- Target
  
  kolrad v3.exe
- Size
  
  45KB
- MD5
  
  9ac1e417bde8a3df3694d531c1b7fa32
- SHA1
  
  ee2f2f17a29697deab7b13199b0423fa364031fa
- SHA256
  
  142f3ea8512bcaa91dd912b133d5b009179ef1b7d59c9320a1f15f53deefbbcc
- SHA512
  
  50d53f87c01e1300e67f47fb33b91ca1993b46fcc26d9b0ea4b27871adc94f0febcd2a3ae6ba0e35ee8330dcb1ec5673242b1d08f017183dc34551eb1fbe4f17
- SSDEEP
  
  768:tdhO/poiiUcjlJIn17ElmH9Xqk5nWEZ5SbTDafuI7CPW55:jw+jjgn5ElmH9XqcnW85SbTquIh
Score

10^/10

xenorat rat trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xenoratrattrojan