General

  • Target

    serrteter.exe

  • Size

    45KB

  • MD5

    369a6ea15eb8ebde64fc1e043ad44382

  • SHA1

    7f45dbf3268ec3bbfdd06c2086294b26d9beebac

  • SHA256

    b543df56136a5f5cab011ce1d88dd866aa47578c37bf5edab19db2c3d8c4e771

  • SHA512

    d88c224419abefae5da3ea3cb4b479c1bd1063a70ad3659d138886e194aca5a82e124e6dc74e108501fbbb0cdcd58c0bf9f8b53330e00a7bc74e978f1ac58533

  • SSDEEP

    768:FdhO/poiiUcjlJInazH9Xqk5nWEZ5SbTDa+WI7CPW5N:bw+jjgnYH9XqcnW85SbTPWIF

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

0.0.0.0

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    1

  • install_path

    appdata

  • port

    8888

  • startup_name

    Windows

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • serrteter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections