General

  • Target

    f8eba74c284d814b491c66fb14fd772f7b9301eb654bba2932eaeb6be5eaf037N

  • Size

    103KB

  • Sample

    240920-yg4z8svbqq

  • MD5

    910251e7b8f59ea46dfc603fa4423ab0

  • SHA1

    7291e9e7d51c5d2b9ef08ef1a24e990ea969ff2e

  • SHA256

    f8eba74c284d814b491c66fb14fd772f7b9301eb654bba2932eaeb6be5eaf037

  • SHA512

    4982f421e52fc229eff69bc3f2146c13b23e34d5d9e2e32e169d6b002be12c63eb41275a7d2d99a37e3cec751ee96b98f166dc557049a063b46effd3da9d21f6

  • SSDEEP

    1536:yXVltIbTriWMk6gtQvdM/ThVIel133KSTkpfbVEhHg2Gkreu2g:yuvzM4tQvd2hBb3EBVEm2Gkreuj

Malware Config

Targets

    • Target

      f8eba74c284d814b491c66fb14fd772f7b9301eb654bba2932eaeb6be5eaf037N

    • Size

      103KB

    • MD5

      910251e7b8f59ea46dfc603fa4423ab0

    • SHA1

      7291e9e7d51c5d2b9ef08ef1a24e990ea969ff2e

    • SHA256

      f8eba74c284d814b491c66fb14fd772f7b9301eb654bba2932eaeb6be5eaf037

    • SHA512

      4982f421e52fc229eff69bc3f2146c13b23e34d5d9e2e32e169d6b002be12c63eb41275a7d2d99a37e3cec751ee96b98f166dc557049a063b46effd3da9d21f6

    • SSDEEP

      1536:yXVltIbTriWMk6gtQvdM/ThVIel133KSTkpfbVEhHg2Gkreu2g:yuvzM4tQvd2hBb3EBVEm2Gkreuj

    • Detect XenoRat Payload

    • XenorRat

      XenorRat is a remote access trojan written in C#.

MITRE ATT&CK Enterprise v15

Tasks