xenorat | 86950835ce30b33e5b538f46915860717379a78fcfe6439974fcb6d127a6dea6 | Triage

Sharing

General

Target

86950835ce30b33e5b538f46915860717379a78fcfe6439974fcb6d127a6dea6N
Size

137KB
Sample

241030-t57c2synfp
MD5

7c1376ee97291445f7a9ad3645ef4100
SHA1

101ed30c8f284886227c2fef18df87136e515f86
SHA256

86950835ce30b33e5b538f46915860717379a78fcfe6439974fcb6d127a6dea6
SHA512

5a0dfebc8b0f2d56a88c4a7718e7fe9b446638f145b2990a0edbe70dfee03154098cc399d3c2a6e664a758bc1f1dfee9c440650cc41d9f9348c5c33e21238cbd
SSDEEP

3072:7v17hMz+Q2eKaRA3Rv4MuM3lGsSTwsST9Y7rkq7/Hm:57Sz+QhKaRA3Rv4Mu2lrSTBST9Y7rkYu

Score

10^/10

xenorat discovery evasion rat trojan

Malware Config

Targets

- Target
  
  86950835ce30b33e5b538f46915860717379a78fcfe6439974fcb6d127a6dea6N
- Size
  
  137KB
- MD5
  
  7c1376ee97291445f7a9ad3645ef4100
- SHA1
  
  101ed30c8f284886227c2fef18df87136e515f86
- SHA256
  
  86950835ce30b33e5b538f46915860717379a78fcfe6439974fcb6d127a6dea6
- SHA512
  
  5a0dfebc8b0f2d56a88c4a7718e7fe9b446638f145b2990a0edbe70dfee03154098cc399d3c2a6e664a758bc1f1dfee9c440650cc41d9f9348c5c33e21238cbd
- SSDEEP
  
  3072:7v17hMz+Q2eKaRA3Rv4MuM3lGsSTwsST9Y7rkq7/Hm:57Sz+QhKaRA3Rv4Mu2lrSTBST9Y7rkYu
Score

10^/10

evasion trojan xenorat discovery rat
- Detect XenoRat Payload
- Windows security bypass
  evasion trojan
- XenorRat
  XenorRat is a remote access trojan written in C#.
  trojan rat xenorat
- Xenorat family
  xenorat
- Drops startup file
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

xenoratdiscoveryevasionrattrojan