Analysis
-
max time kernel
192s -
max time network
202s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
14-11-2024 10:21
General
-
Target
Flycode_VPN_installer.exe
-
Size
725KB
-
MD5
6214931316aef5b8f870d375a7649218
-
SHA1
cfbded8b49b5c4c4ad1ab594010d14cb236463b0
-
SHA256
32aaddf41bbed77709a5db74ed8a62e179f65486945cfb20ccaa6023686a6871
-
SHA512
8eaa85a23fc4c5b38b08afbaad9ad7101f7c43e85fdc3e2841dac42e484b8af07ccea04b74d304dff39573d4e49747b49ca66f80444222268d1b8ab318e6e78f
-
SSDEEP
12288:LxeQCJwvvFkyjj6ZqxdDXCXxFCQE1Vdr+iGkvii1KRlWPBboSWo69c32a6st7Ylm:NeQMwvNkn2DXCXxFCQE1Vdr+iGkvii1J
Score
10/10
Malware Config
Signatures
-
Detect XenoRat Payload 1 IoCs
-
XenorRat
XenorRat is a remote access trojan written in C#.
-
Xenorat family
Processes
-
C:\Users\Admin\AppData\Local\Temp\Flycode_VPN_installer.exe"C:\Users\Admin\AppData\Local\Temp\Flycode_VPN_installer.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
752KB
-
Filesize
256KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB