Overview

overview

10

Static

static

1

Stop (1).bat

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Stop (1).bat

  • Size

    146B

  • Sample

    240819-smk7es1fjb

  • MD5

    55511eb333379984acf86f37d5fd5893

  • SHA1

    c787646e4fdd5db20eead33973f3aedd25f3be1e

  • SHA256

    76b24fbf7dcc4ff46b3a455761b063b46ec52354c117724e34a911dda45b1d42

  • SHA512

    c531ea6c7035f1b533ab1af0e9c8218042db7eabf3e58b6d9fb0dc6111e9790ec5a4b0b91f02342e0584c6ce652bb322e4ec5a96b0cbdd8f17755001d29f691b

Score
10/10
xenoratdiscoveryrattrojan

Malware Config

Extracted

Family

xenorat

C2

174.60.140.164

Mutex

Xeno_rat_nd8912f

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    7707

  • startup_name

    TransAgenda

Targets

    • Target

      Stop (1).bat

    • Size

      146B

    • MD5

      55511eb333379984acf86f37d5fd5893

    • SHA1

      c787646e4fdd5db20eead33973f3aedd25f3be1e

    • SHA256

      76b24fbf7dcc4ff46b3a455761b063b46ec52354c117724e34a911dda45b1d42

    • SHA512

      c531ea6c7035f1b533ab1af0e9c8218042db7eabf3e58b6d9fb0dc6111e9790ec5a4b0b91f02342e0584c6ce652bb322e4ec5a96b0cbdd8f17755001d29f691b

    Score
    10/10
    xenoratdiscoveryrattrojan

    • XenorRat

      XenorRat is a remote access trojan written in C#.

      trojanratxenorat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks