Overview

overview

10

Static

static

10

XenoClient.exe

windows7-x64

10

XenoClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XenoClient.exe

  • Size

    45KB

  • MD5

    1875c2ce26eb017938b66dc856c92df4

  • SHA1

    9a2f79b095f15df62feb27bbf433e002cf12074b

  • SHA256

    43636464ded3e9c31b2a19daa2e3307b80d67dae23e7e8cf043edddfff289b57

  • SHA512

    6211da4b88fba3d805c159e2fa35856512d8c22dc865d42ad795ce026491eb48a6fe539ba981e95ae90532afebbc8a1dc9cfb33bf06094e302577d38ab25e06a

  • SSDEEP

    768:vdhO/poiiUcjlJInKqH9Xqk5nWEZ5SbTDaxWI7CPW50:lw+jjgnJH9XqcnW85SbTIWIM

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

true-britain.gl.at.ply.gg

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    temp

  • port

    45631

  • startup_name

    CCleaner

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XenoClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections