xenorat | 56921c8c66046187689a9895bd83ab22d7939e4ce015921515d2bf41ae50f4b9 | Triage

Sharing

General

Target

skibidi.exe
Size

45KB
Sample

240613-nskqma1drl
MD5

0fcc64e00bcf525ca8afe84a5bb8fa88
SHA1

67e33df965eaa0e5867a96c4a418b904bcf5c77a
SHA256

56921c8c66046187689a9895bd83ab22d7939e4ce015921515d2bf41ae50f4b9
SHA512

6e1df63cbbe7050114fccfa9cb0425fbb49f69e14b806323a368c169fe7424d9b64f3e91927faae81086ae5be2f250e1633c822bbc08cb124117b9cf174ddb92
SSDEEP

768:WdhO/poiiUcjlJInJn+eP3H9Xqk5nWEZ5SbTDaGuI7CPW54:Aw+jjgn1H9XqcnW85SbTTuIw

Score

10^/10

xenorat rat trojan

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

skibidi_nd8912d

Attributes

delay
5000
install_path
nothingset
port
4444
startup_name
skibidi

Targets

- Target
  
  skibidi.exe
- Size
  
  45KB
- MD5
  
  0fcc64e00bcf525ca8afe84a5bb8fa88
- SHA1
  
  67e33df965eaa0e5867a96c4a418b904bcf5c77a
- SHA256
  
  56921c8c66046187689a9895bd83ab22d7939e4ce015921515d2bf41ae50f4b9
- SHA512
  
  6e1df63cbbe7050114fccfa9cb0425fbb49f69e14b806323a368c169fe7424d9b64f3e91927faae81086ae5be2f250e1633c822bbc08cb124117b9cf174ddb92
- SSDEEP
  
  768:WdhO/poiiUcjlJInJn+eP3H9Xqk5nWEZ5SbTDaGuI7CPW54:Aw+jjgn1H9XqcnW85SbTTuIw
Score

10^/10

xenorat rat trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

xenoratrattrojan