Overview

overview

10

Static

static

10

Testing.exe

windows7-x64

10

Testing.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Testing.exe

  • Size

    51KB

  • MD5

    9a1824ec694541ef4db6417d38529d5f

  • SHA1

    f57f931fd8868997311faffe4fedb380ae743482

  • SHA256

    17253d61990c1669538399938dcaf6ac523b22cbf85659aed90d6b2e4e3babac

  • SHA512

    edc873d4abd82eb60836d5daad421d730760ee2822e673f1b8a66102a3bc6553956340c025126d34a09a68dc411d1f2a6230ccd2cc82c5561a33a363641f3f8a

  • SSDEEP

    768:yivdjHrddilbVauou79Eo7cqtPBy6HDBSkGu2yPo+LGZYebFDauZ6RNSgNOv:LpHmVauo3xAycDj6CSYebFbAf4v

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

147.185.221.18

Mutex

nd8912d

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    18198

  • startup_name

    nothingset

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Testing.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections