General
-
Target
d2f6a5ba72560fc3f23bfe28c9348ea70971b37c0366fbcbfacc3cec1ce4dc87N.exe
-
Size
45KB
-
Sample
241129-z29xnawpgx
-
MD5
9e49a6fd84a821be03b5110ad449c710
-
SHA1
e17e40b5c18190f3f5c44ae2c74060c90ca12f3d
-
SHA256
d2f6a5ba72560fc3f23bfe28c9348ea70971b37c0366fbcbfacc3cec1ce4dc87
-
SHA512
995e28cfd9f8ae96c733623f57732f7ad9be57ae46535bacd153ff175a90260fed4605577a8465e9beab29692f41d98d00099b4ae6f337f5a05c25cf3eb8a8b5
-
SSDEEP
768:RdhO/poiiUcjlJInfTwH9Xqk5nWEZ5SbTDa5WI7CPW5Z:Pw+jjgncH9XqcnW85SbTwWIh
Behavioral task
behavioral1
Sample
d2f6a5ba72560fc3f23bfe28c9348ea70971b37c0366fbcbfacc3cec1ce4dc87N.exe
Resource
win7-20240729-en
Malware Config
Extracted
xenorat
allow-property.gl.joinmc.link
Xeno_rat_nd8912d
-
delay
5000
-
install_path
nothingset
-
port
5784
-
startup_name
nothingset
Targets
-
-
Target
d2f6a5ba72560fc3f23bfe28c9348ea70971b37c0366fbcbfacc3cec1ce4dc87N.exe
-
Size
45KB
-
MD5
9e49a6fd84a821be03b5110ad449c710
-
SHA1
e17e40b5c18190f3f5c44ae2c74060c90ca12f3d
-
SHA256
d2f6a5ba72560fc3f23bfe28c9348ea70971b37c0366fbcbfacc3cec1ce4dc87
-
SHA512
995e28cfd9f8ae96c733623f57732f7ad9be57ae46535bacd153ff175a90260fed4605577a8465e9beab29692f41d98d00099b4ae6f337f5a05c25cf3eb8a8b5
-
SSDEEP
768:RdhO/poiiUcjlJInfTwH9Xqk5nWEZ5SbTDa5WI7CPW5Z:Pw+jjgncH9XqcnW85SbTwWIh
-
Detect XenoRat Payload
-
Xenorat family
-