General
-
Target
https://github.com/M1W9690/Vape-V4-Cracked-free/releases/tag/VapeClient
-
Sample
240812-rjbcdavbjn
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/M1W9690/Vape-V4-Cracked-free/releases/tag/VapeClient
Resource
win10v2004-20240802-en
windows10-2004-x64
17 signatures
1800 seconds
Malware Config
Extracted
Family
xenorat
C2
127.0.0.1
Mutex
Xeno_rat_nd8912d
Attributes
-
delay
5000
-
install_path
nothingset
-
port
4444
-
startup_name
nothingset
Targets
-
-
Target
https://github.com/M1W9690/Vape-V4-Cracked-free/releases/tag/VapeClient
Score10/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1