Overview

overview

10

Static

static

10

Fixer/Fixer.exe

windows10-1703-x64

10

Fixer/Fixer.exe

windows10-2004-x64

10

Fixer/Fixer.exe

windows11-21h2-x64

10

Fixer/Fixer.exe

macos-10.15-amd64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Password a.rar

  • Size

    19KB

  • MD5

    1a9c0e42ec58b7255874aad4971425b7

  • SHA1

    77dcb7b5da67f58d193a8e1669c76a9822e6046a

  • SHA256

    fe334383fda5544da762cfdf0e63b67f8353697bd978954eab09c6edba951488

  • SHA512

    10b878aa9bd8103b2b4e64a81df5b996f5659d705a5eaf49bfe8a8d341b48f31cb08c19fe171765dad63132ec550ba877c07fb4922f10e4934c1ef9462919efb

  • SSDEEP

    384:btxaCY994W8hZLJokQz16hBCODEE6rfCGXtYlGBiVRDwUZ6oL8m+7:iCBx2H5OqrfCGX8GBCc6dI

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    1

  • install_path

    appdata

  • port

    69

  • startup_name

    System-33

Signatures

  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Password a.rar
    .rar

    Password: a

  • Fixer/Fixer.exe
    .exe windows:4 windows x86 arch:x86

    Password: a

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections