General

  • Target

    https://gofile.io/d/XL0XKB

  • Sample

    241013-gvhwgswhnm

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    nothingset

  • port

    4444

  • startup_name

    CriticalHost

Targets

MITRE ATT&CK Enterprise v15

Tasks