General
-
Target
poop.exe
-
Size
45KB
-
Sample
241011-2edxtaxekd
-
MD5
53f63786c9367b87df93f192f31f5126
-
SHA1
66980e6f9f4e3f33e55aad864be19c219e1800b9
-
SHA256
f13e81adddbeb8a40c2e1716f2fb73d00af5163252a7599512477855e4035e01
-
SHA512
abdfca41aa3aaefab679a064271831431d5ac22d8697aebd2428851264e1daa2ed523a7d3ff7a21000a7955ba66a092dd65556731f3c26bae7c5a862b366735b
-
SSDEEP
768:LdhO/poiiUcjlJInw7ElmH9Xqk5nWEZ5SbTDa1uI7CPW5F:5w+jjgnIElmH9XqcnW85SbT4uIN
Malware Config
Extracted
xenorat
192.168.0.30
Mincraft_Service
-
delay
5000
-
install_path
nothingset
-
port
4782
-
startup_name
nothingset
Targets
-
-
Target
poop.exe
-
Size
45KB
-
MD5
53f63786c9367b87df93f192f31f5126
-
SHA1
66980e6f9f4e3f33e55aad864be19c219e1800b9
-
SHA256
f13e81adddbeb8a40c2e1716f2fb73d00af5163252a7599512477855e4035e01
-
SHA512
abdfca41aa3aaefab679a064271831431d5ac22d8697aebd2428851264e1daa2ed523a7d3ff7a21000a7955ba66a092dd65556731f3c26bae7c5a862b366735b
-
SSDEEP
768:LdhO/poiiUcjlJInw7ElmH9Xqk5nWEZ5SbTDa1uI7CPW5F:5w+jjgnIElmH9XqcnW85SbT4uIN
-
Detect XenoRat Payload
-