Overview

overview

10

Static

static

10

Blue.cc Te...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Blue.cc Temp Woofer.exe

  • Size

    282KB

  • MD5

    bd58be40cf8514257afa679943e3d985

  • SHA1

    6c1e0bfcdb791e4dc392983f750d41750ff03f0d

  • SHA256

    8ea18eece31949fcbf403dcd372a686cb70cb41272c3fade7248a272d74a003a

  • SHA512

    9b7ba96204c0a7987fba24a9fee589edc19737445fb007eb687c3b3f037a412d550f9315835b95f7cef74a37d2b6f85bd00d7e6086ef38b4154d4001febe8f3c

  • SSDEEP

    1536:9w+jjgneH9XqcnW85SbTCWIa7tMuBtzGulxuJVZ2eY7WHpqiH:9w+jqA91UbTC2t7leZ2eWNo

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

192.168.244.72

Mutex

Blue.cc Temp Woofer

Attributes
  • delay

    10

  • install_path

    nothingset

  • port

    4444

  • startup_name

    nothingset

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Blue.cc Temp Woofer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections