Overview

overview

10

Static

static

10

reWASD.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    reWASD.exe

  • Size

    45KB

  • MD5

    2aca4f66218f363789af6b07703099c4

  • SHA1

    f79e9ed664bc63debb7e30b883886b1b232246b2

  • SHA256

    69e4f7493e9dbf92314e0f5190ff19fc251427660369accf81c646ae6ec5024c

  • SHA512

    9ab6580367d41b26fd7583e78f23b079a2deb08abe90145da80735d4a53062f69fbd5391ba72f489094f3e0095b0d225180dd09fd0e8257935746a4e1b9b8b8c

  • SSDEEP

    768:udhO/poiiUcjlJInlkiH9Xqk5nWEZ5SbTDavWI7CPW5C:4w+jjgnbH9XqcnW85SbTmWIq

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

81.246.210.135

Mutex

xaaxa

Attributes
  • delay

    5000

  • install_path

    nothingset

  • port

    4412

  • startup_name

    nothingset

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reWASD.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections