Overview
overview
10Static
static
10Release.zip
windows10-ltsc 2021-x64
10plugins/Chat.dll
windows10-ltsc 2021-x64
1plugins/Fi...er.dll
windows10-ltsc 2021-x64
1plugins/Fun.dll
windows10-ltsc 2021-x64
1plugins/Hvnc.dll
windows10-ltsc 2021-x64
1plugins/InfoGrab.dll
windows10-ltsc 2021-x64
1plugins/KeyLogger.dll
windows10-ltsc 2021-x64
1plugins/Ke...ne.dll
windows10-ltsc 2021-x64
1plugins/Li...ne.dll
windows10-ltsc 2021-x64
1plugins/Pr...er.dll
windows10-ltsc 2021-x64
1plugins/Re...er.dll
windows10-ltsc 2021-x64
1plugins/Re...xy.dll
windows10-ltsc 2021-x64
1plugins/Sc...ol.dll
windows10-ltsc 2021-x64
1plugins/Shell.dll
windows10-ltsc 2021-x64
1plugins/Startup.dll
windows10-ltsc 2021-x64
1plugins/Sy...er.dll
windows10-ltsc 2021-x64
1plugins/Uacbypass.dll
windows10-ltsc 2021-x64
1plugins/WebCam.dll
windows10-ltsc 2021-x64
1stub/xeno ...nt.exe
windows10-ltsc 2021-x64
10xeno rat server.exe
windows10-ltsc 2021-x64
3Analysis
-
max time kernel
132s -
max time network
138s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
19-12-2024 19:16
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
plugins/Chat.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral3
Sample
plugins/File manager.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
plugins/Fun.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral5
Sample
plugins/Hvnc.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral6
Sample
plugins/InfoGrab.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral7
Sample
plugins/KeyLogger.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral8
Sample
plugins/KeyLoggerOffline.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral9
Sample
plugins/LiveMicrophone.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral10
Sample
plugins/ProcessManager.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral11
Sample
plugins/Registry Manager.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral12
Sample
plugins/ReverseProxy.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral13
Sample
plugins/ScreenControl.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral14
Sample
plugins/Shell.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral15
Sample
plugins/Startup.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral16
Sample
plugins/SystemPower.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral17
Sample
plugins/Uacbypass.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral18
Sample
plugins/WebCam.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral19
Sample
stub/xeno rat client.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral20
Sample
xeno rat server.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
plugins/InfoGrab.dll
-
Size
971KB
-
MD5
86bf07899c4e9764b0752713fe6f12c9
-
SHA1
813924938e367a361c1145ce135e078967d7903e
-
SHA256
11a09734dc3a412ef8130a65a0c06b1ccfc24673d818959cfe50f6b462e33d67
-
SHA512
bb0ca1445b0215ca3bb85defea6fc902618218be04ce006565753c13e3fb3cf786d8dc0fcbe4f77443be28feefe8331e710d895ae8e0b20455b15e7a8bb94578
-
SSDEEP
24576:GOGlTjiaeAeOTKAzbARntW+hZxCNqbo6RVX8sa6AtWZl2cFkN:GOGNjiSZTKAzkltDhTCcVX8saTtWycO
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\plugins\InfoGrab.dll,#11⤵PID:2120
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4600,i,3154206195988791752,9697906671389759283,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:81⤵PID:4024
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=3820,i,3154206195988791752,9697906671389759283,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:81⤵PID:4796