Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15-12-2024 16:50
General
-
Target
xRAT 2.exe
-
Size
1.2MB
-
MD5
6d8489e8ef02f1dd5d496bfa3a4ff48f
-
SHA1
d8df172354f75d100db674e52654f35f53129e5e
-
SHA256
63c0c9e03586b36bba16e6cd2f73a71d675f39e9a4c87b09aaa2253cb763c833
-
SHA512
99f3ecbf5b4596f663d7b6bd9bb28e0967de33ebbc08b02272ed4a5fc0ef29bc04cf3a6537ca6e2ec5dc7acba9a0326708e0f09be9c86b827d670e833ee51e40
-
SSDEEP
6144:WhPmJabS3OVcLGRk0EiDsQYGhbcEJks7lOFqKGhIax2WbcGILJPO2JkfTKIf941:y+mk4sQFNl/lcGWBJkA
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xRAT 2.exe"C:\Users\Admin\AppData\Local\Temp\xRAT 2.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
393B
MD5c2fd64e9c69c2898d27653b3b47db2ff
SHA1610f9e4105fbf0f668897bec7be77b8bf708a6ae
SHA256f07f40e283e8d07742a7743dcd5de22933e1c6a6e39513fe0164cd8a910fa030
SHA51277f8c240db2afef34228e3cc59a2d46a18e5f757d8e20ae670dd1ca4eb420757afa5b7003e5ae8ef98806b52605c8828393418b7ba6f120267303d611630d664
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB