Overview

overview

10

Static

static

10

59ac0f6935...bN.exe

windows7-x64

10

59ac0f6935...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59ac0f6935c6289c99cf0b8f46f595b021dc744f0b85472a861e534e3da74f1bN

  • Size

    69KB

  • MD5

    2faacc30154f19cccca656151220cdd0

  • SHA1

    131963b866a54f15fe04874c70af53561417665c

  • SHA256

    59ac0f6935c6289c99cf0b8f46f595b021dc744f0b85472a861e534e3da74f1b

  • SHA512

    626598071453ff993b05f9c6c7468aebd299fc5b8ee29a7c2f5b093b1e968c548288812d83c1f3717ce28330649e93a8d51f39c1f7c853ce6180ffae520b3f39

  • SSDEEP

    1536:2w+jjgn5lF2I8H9XqcnW85SbTVuIVUppzz3NuKTHoW9QurRkWO:2w+jq5lFfG91UbTVb0VLxh9QMWWO

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    4444

  • startup_name

    TumaluGame

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59ac0f6935c6289c99cf0b8f46f595b021dc744f0b85472a861e534e3da74f1bN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections