Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Green Machine.exe

  • Size

    310KB

  • MD5

    232ce0965d765e1c5ba2c7d32c4b3a46

  • SHA1

    0b691c71ad862d21a56d307d8e282e5659b274bd

  • SHA256

    5686330d95dbf63e3960db50c22084d060e2a78c95f1b5592589ba2e86dbb590

  • SHA512

    7858bc9bbfa0731e72f680939abac6f0b9f577f38017a152fa4966c82554a028c45fd76e32c34fa9240fe15150b34bc4607f8cad2871adc65fdb88d2d2cd690d

  • SSDEEP

    3072:Kw+jqp91UbTgnt8Mlww1NMmMToaQn+PkL3Zk0gR120:nWg91UbG8MPKtUayw

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

boogerbreath-54250.portmap.host

Mutex

basketball_legendsgreen

Attributes
  • delay

    1000

  • install_path

    nothingset

  • port

    54250

  • startup_name

    nothingset

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Green Machine.exe
    .exe windows:4 windows x86 arch:x86

    Password: Rifk1337

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections