Overview

overview

10

Static

static

10

test.exe

windows7-x64

10

test.exe

windows10-2004-x64

10

Resubmissions

29-06-2024 07:50

240629-jn93hatdnf 10

29-06-2024 07:42

240629-jj34dstdjb 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    45KB

  • MD5

    fb6a501b93be4706521d089b6f19e50f

  • SHA1

    39c6cd822a768edabeae098959474f0b7ed73bdb

  • SHA256

    658fc754755da07407dd615593df8418974ac01644aaa114c89000fe3583b2b7

  • SHA512

    897fc37ed1b6b403c1fee909ba5ff6a67cfbf83b4d9d7be2c9f00b3ab4e458637420edd14c26d4673b8271ba3176261a03864ddeb86e82c67869f41b79ce5d39

  • SSDEEP

    768:VdhO/poiiUcjlJInSCLue9H9Xqk5nWEZ5SbTDa1WI7CPW5I:rw+jjgnNye9H9XqcnW85SbT0WIA

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

68.228.24.220

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    4444

  • startup_name

    conhost.exe

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections