General
-
Target
kolrad v3.exe
-
Size
45KB
-
Sample
240605-g5eltagd4x
-
MD5
9ac1e417bde8a3df3694d531c1b7fa32
-
SHA1
ee2f2f17a29697deab7b13199b0423fa364031fa
-
SHA256
142f3ea8512bcaa91dd912b133d5b009179ef1b7d59c9320a1f15f53deefbbcc
-
SHA512
50d53f87c01e1300e67f47fb33b91ca1993b46fcc26d9b0ea4b27871adc94f0febcd2a3ae6ba0e35ee8330dcb1ec5673242b1d08f017183dc34551eb1fbe4f17
-
SSDEEP
768:tdhO/poiiUcjlJIn17ElmH9Xqk5nWEZ5SbTDafuI7CPW55:jw+jjgn5ElmH9XqcnW85SbTquIh
Malware Config
Extracted
xenorat
192.168.1.36
Xeno_rat_nd8912d
-
delay
5000
-
install_path
nothingset
-
port
1605
-
startup_name
nothingset
Targets
-
-
Target
kolrad v3.exe
-
Size
45KB
-
MD5
9ac1e417bde8a3df3694d531c1b7fa32
-
SHA1
ee2f2f17a29697deab7b13199b0423fa364031fa
-
SHA256
142f3ea8512bcaa91dd912b133d5b009179ef1b7d59c9320a1f15f53deefbbcc
-
SHA512
50d53f87c01e1300e67f47fb33b91ca1993b46fcc26d9b0ea4b27871adc94f0febcd2a3ae6ba0e35ee8330dcb1ec5673242b1d08f017183dc34551eb1fbe4f17
-
SSDEEP
768:tdhO/poiiUcjlJIn17ElmH9Xqk5nWEZ5SbTDafuI7CPW55:jw+jjgn5ElmH9XqcnW85SbTquIh
-