Overview
overview
10Static
static
10country_fl...y.mmdb
windows10-2004-x64
3country_flags/es.png
windows10-2004-x64
3plugins/Chat.dll
windows10-2004-x64
1plugins/Fi...er.dll
windows10-2004-x64
1plugins/Fun.dll
windows10-2004-x64
1plugins/Hvnc.dll
windows10-2004-x64
1plugins/InfoGrab.dll
windows10-2004-x64
1plugins/KeyLogger.dll
windows10-2004-x64
1plugins/Ke...ne.dll
windows10-2004-x64
1plugins/Li...ne.dll
windows10-2004-x64
1plugins/Pr...er.dll
windows10-2004-x64
1plugins/Re...er.dll
windows10-2004-x64
1plugins/Re...xy.dll
windows10-2004-x64
1plugins/Sc...ol.dll
windows10-2004-x64
1plugins/Shell.dll
windows10-2004-x64
1plugins/Startup.dll
windows10-2004-x64
1plugins/Sy...er.dll
windows10-2004-x64
1plugins/Uacbypass.dll
windows10-2004-x64
1plugins/WebCam.dll
windows10-2004-x64
1stub/xeno ...nt.exe
windows10-2004-x64
10xeno rat server.exe
windows10-2004-x64
10Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
09/08/2024, 20:39
Behavioral task
behavioral1
Sample
country_flags/GeoLite2-Country.mmdb
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
country_flags/es.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
plugins/Chat.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
plugins/File manager.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
plugins/Fun.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
plugins/Hvnc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
plugins/InfoGrab.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
plugins/KeyLogger.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
plugins/KeyLoggerOffline.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
plugins/LiveMicrophone.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
plugins/ProcessManager.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
plugins/Registry Manager.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
plugins/ReverseProxy.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
plugins/ScreenControl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
plugins/Shell.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
plugins/Startup.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
plugins/SystemPower.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
plugins/Uacbypass.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
plugins/WebCam.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
stub/xeno rat client.exe
Resource
win10v2004-20240802-en
General
- Target country_flags/es.png
- Size 937B
- Sample240809-zfe56asble
- SHA256 8c94f28bca24b14c19aa1aef47c7ae58cb403abd29bab0d9077eb3af92b2b951
- MD5 05b768d889c38a58c4927d2e0da65e85
- SHA1 fdb7d52c46fd0e1d2a869f912d6f5ff92a23854a
- SHA512 3f5462bdc4dd1600088c288937bd2e5df08b86e5cafb01ce17986c7d624e57156bed10a31f5955bd8371445b33cd678cf657855955a41ee61da786187ad151af
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).