Release.zip
- SHA256 e7b275d70655db9cb43fa606bbe2e4f22478ca4962bbf9f299d66eda567d63cd
Behavioral task
behavioral1
Sample
stub/xeno rat client.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
stub/xeno rat client.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
xeno rat server.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
xeno rat server.exe
Resource
win10v2004-20240802-en
xenorat
localhost
testing 123123
1000
nothingset
1234
nothingset
| resource | yara_rule |
|---|---|
| static1/unpack001/plugins/Chat.dll | family_xenorat |
| static1/unpack001/plugins/File manager.dll | family_xenorat |
| static1/unpack001/plugins/Fun.dll | family_xenorat |
| static1/unpack001/plugins/Hvnc.dll | family_xenorat |
| static1/unpack001/plugins/InfoGrab.dll | family_xenorat |
| static1/unpack001/plugins/KeyLogger.dll | family_xenorat |
| static1/unpack001/plugins/KeyLoggerOffline.dll | family_xenorat |
| static1/unpack001/plugins/LiveMicrophone.dll | family_xenorat |
| static1/unpack001/plugins/ProcessManager.dll | family_xenorat |
| static1/unpack001/plugins/Registry Manager.dll | family_xenorat |
| static1/unpack001/plugins/ReverseProxy.dll | family_xenorat |
| static1/unpack001/plugins/ScreenControl.dll | family_xenorat |
| static1/unpack001/plugins/Shell.dll | family_xenorat |
| static1/unpack001/plugins/Startup.dll | family_xenorat |
| static1/unpack001/plugins/SystemPower.dll | family_xenorat |
| static1/unpack001/plugins/Uacbypass.dll | family_xenorat |
| static1/unpack001/plugins/WebCam.dll | family_xenorat |
| static1/unpack001/stub/xeno rat client.exe | family_xenorat |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/plugins/Chat.dll |
| unpack001/plugins/File manager.dll |
| unpack001/plugins/Fun.dll |
| unpack001/plugins/Hvnc.dll |
| unpack001/plugins/InfoGrab.dll |
| unpack001/plugins/KeyLogger.dll |
| unpack001/plugins/KeyLoggerOffline.dll |
| unpack001/plugins/LiveMicrophone.dll |
| unpack001/plugins/ProcessManager.dll |
| unpack001/plugins/Registry Manager.dll |
| unpack001/plugins/ReverseProxy.dll |
| unpack001/plugins/ScreenControl.dll |
| unpack001/plugins/Shell.dll |
| unpack001/plugins/Startup.dll |
| unpack001/plugins/SystemPower.dll |
| unpack001/plugins/Uacbypass.dll |
| unpack001/plugins/WebCam.dll |
| unpack001/stub/xeno rat client.exe |
| unpack001/xeno rat server.exe |
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Detect XenoRat Payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.