General
-
Target
https://www.kochi.lulumall.in/
-
Sample
241105-q4pj3asbra
Score
10/10
Malware Config
Targets
-
-
Target
https://www.kochi.lulumall.in/
Score10/10-
Detect XenoRat Payload
-
XenorRat
XenorRat is a remote access trojan written in C#.
-
Xenorat family
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-