Overview
overview
10Static
static
10plugins/Chat.dll
windows10-ltsc 2021-x64
1plugins/Fi...er.dll
windows10-ltsc 2021-x64
1plugins/Fun.dll
windows10-ltsc 2021-x64
1plugins/Hvnc.dll
windows10-ltsc 2021-x64
1plugins/InfoGrab.dll
windows10-ltsc 2021-x64
1plugins/KeyLogger.dll
windows10-ltsc 2021-x64
1plugins/Ke...ne.dll
windows10-ltsc 2021-x64
1plugins/Li...ne.dll
windows10-ltsc 2021-x64
1plugins/Pr...er.dll
windows10-ltsc 2021-x64
1plugins/Re...er.dll
windows10-ltsc 2021-x64
1plugins/Re...xy.dll
windows10-ltsc 2021-x64
1plugins/Sc...ol.dll
windows10-ltsc 2021-x64
1plugins/Shell.dll
windows10-ltsc 2021-x64
1plugins/Startup.dll
windows10-ltsc 2021-x64
1plugins/Sy...er.dll
windows10-ltsc 2021-x64
1plugins/Uacbypass.dll
windows10-ltsc 2021-x64
1plugins/WebCam.dll
windows10-ltsc 2021-x64
1stub/xeno ...nt.exe
windows10-ltsc 2021-x64
10xeno rat server.exe
windows10-ltsc 2021-x64
3Analysis
-
max time kernel
154s -
max time network
278s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
11-11-2024 22:00
Behavioral task
behavioral1
Sample
plugins/Chat.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
plugins/File manager.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
plugins/Fun.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
plugins/Hvnc.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral5
Sample
plugins/InfoGrab.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral6
Sample
plugins/KeyLogger.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral7
Sample
plugins/KeyLoggerOffline.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral8
Sample
plugins/LiveMicrophone.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral9
Sample
plugins/ProcessManager.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral10
Sample
plugins/Registry Manager.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral11
Sample
plugins/ReverseProxy.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral12
Sample
plugins/ScreenControl.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral13
Sample
plugins/Shell.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral14
Sample
plugins/Startup.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral15
Sample
plugins/SystemPower.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral16
Sample
plugins/Uacbypass.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral17
Sample
plugins/WebCam.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral18
Sample
stub/xeno rat client.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral19
Sample
xeno rat server.exe
Resource
win10ltsc2021-20241023-en
General
-
Target
xeno rat server.exe
-
Size
2.0MB
-
MD5
3987ee127f2a2cf8a29573d4e111a8e8
-
SHA1
fc253131e832297967f93190217f0ce403e38cb0
-
SHA256
3d00a800474ddf382212e003222805bd74665b69cec43b554f91c3cd9edf04c4
-
SHA512
69d5ac7a691dde1a3ed7f495e9b9180e63152ddaaa3d1b596ad9cbeb4d7b088f3fc4b138ecf87070014cdfa9047be18940b720de60642389921a10053250787b
-
SSDEEP
49152:EnxkNTRWjxoJochWQI3kqXfd+/9AManGhR0vNgtIeGWtOc5Q:ExkNTcaJhDI3kqXf0FtWykQDCiQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
xeno rat server.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language xeno rat server.exe