General
-
Target
something.exe
-
Size
45KB
-
Sample
241015-yav4raxckm
-
MD5
2755eec715f4be9c61e964bf57d75c80
-
SHA1
638afd519332a470e6a4a63abf9df3ca65787f9d
-
SHA256
07c1bf391c3054918d6843413a6c8e5cd62d7479173565708db41c97a2a0212d
-
SHA512
ea70723cb1ce760c8e24f067382cd6a6f64894a5de597f349913454a6c41c28516279c6e89dadaae1f748b39d72b821d5f77b3425f735a0f2cad7c26007527a7
-
SSDEEP
768:FdhO/poiiUcjlJInwVH9Xqk5nWEZ5SbTDazuI7CPW5N:bw+jjgn4H9XqcnW85SbTuuIl
Malware Config
Extracted
xenorat
127.0.0.1
Xeno_rat_nd8912d
-
delay
5000
-
install_path
appdata
-
port
6932
-
startup_name
SYSTEM
Targets
-
-
Target
something.exe
-
Size
45KB
-
MD5
2755eec715f4be9c61e964bf57d75c80
-
SHA1
638afd519332a470e6a4a63abf9df3ca65787f9d
-
SHA256
07c1bf391c3054918d6843413a6c8e5cd62d7479173565708db41c97a2a0212d
-
SHA512
ea70723cb1ce760c8e24f067382cd6a6f64894a5de597f349913454a6c41c28516279c6e89dadaae1f748b39d72b821d5f77b3425f735a0f2cad7c26007527a7
-
SSDEEP
768:FdhO/poiiUcjlJInwVH9Xqk5nWEZ5SbTDazuI7CPW5N:bw+jjgn4H9XqcnW85SbTuuIl
-
Detect XenoRat Payload
-
Executes dropped EXE
-