General
-
Target
pegasus.exe
-
Size
45KB
-
Sample
240707-qbf28asgkj
-
MD5
f9a1750cd762fa4fb79b79161b0427ea
-
SHA1
59aad082ead63005a62d0401649420768227c049
-
SHA256
53b919493ccf56d390b44b53fa6b28d723bc0483790914792f100827798afdd0
-
SHA512
f712cf63c5d747158f9829bc036fd2c06bb51dc211b1b9473a9df843b0d2c35ae3e849908cdeed9b7b23e66e33bfffeb34b0c73688daca211787c3b07a79377d
-
SSDEEP
768:ldhO/poiiUcjlJIn4hYH9Xqk5nWEZ5SbTDaxuI7CPW5p:7w+jjgn4SH9XqcnW85SbTsuIx
Malware Config
Extracted
xenorat
192.168.0.48
Xeno_rat_nd8912d
-
delay
5000
-
install_path
appdata
-
port
4444
-
startup_name
JavaUpdater
Targets
-
-
Target
pegasus.exe
-
Size
45KB
-
MD5
f9a1750cd762fa4fb79b79161b0427ea
-
SHA1
59aad082ead63005a62d0401649420768227c049
-
SHA256
53b919493ccf56d390b44b53fa6b28d723bc0483790914792f100827798afdd0
-
SHA512
f712cf63c5d747158f9829bc036fd2c06bb51dc211b1b9473a9df843b0d2c35ae3e849908cdeed9b7b23e66e33bfffeb34b0c73688daca211787c3b07a79377d
-
SSDEEP
768:ldhO/poiiUcjlJIn4hYH9Xqk5nWEZ5SbTDaxuI7CPW5p:7w+jjgn4SH9XqcnW85SbTsuIx
-
Executes dropped EXE
-