General
-
Target
b1593574e46fb1f30b1da4fa594f43bb52b051a616db3.exe
-
Size
45KB
-
Sample
241227-qxz28awlbl
-
MD5
12ac061f02656d9e3d3cfbdd429a6bcf
-
SHA1
5d6bb219d35a0dd57ddcbdb5950e9307593279e0
-
SHA256
b1593574e46fb1f30b1da4fa594f43bb52b051a616db390abf23ef45508f8b13
-
SHA512
36a8ff30b69343d96b41034330f30ccf00e0bf9f71f58e385bc8c03ffaf23cc23130f7ad705b6d23f51e44810f2438fedcaa7bd0cc57af27de106c54c6b3957a
-
SSDEEP
768:ydhO/poiiUcjlJInH7ElmH9Xqk5nWEZ5SbTDa6uI7CPW5F:Uw+jjgnbElmH9XqcnW85SbTPuIN
Behavioral task
behavioral1
Sample
b1593574e46fb1f30b1da4fa594f43bb52b051a616db3.exe
Resource
win7-20241010-en
Malware Config
Extracted
xenorat
194.59.30.69
Xeno_rat_nd8912d
-
delay
5000
-
install_path
nothingset
-
port
16589
-
startup_name
nothingset
Targets
-
-
Target
b1593574e46fb1f30b1da4fa594f43bb52b051a616db3.exe
-
Size
45KB
-
MD5
12ac061f02656d9e3d3cfbdd429a6bcf
-
SHA1
5d6bb219d35a0dd57ddcbdb5950e9307593279e0
-
SHA256
b1593574e46fb1f30b1da4fa594f43bb52b051a616db390abf23ef45508f8b13
-
SHA512
36a8ff30b69343d96b41034330f30ccf00e0bf9f71f58e385bc8c03ffaf23cc23130f7ad705b6d23f51e44810f2438fedcaa7bd0cc57af27de106c54c6b3957a
-
SSDEEP
768:ydhO/poiiUcjlJInH7ElmH9Xqk5nWEZ5SbTDa6uI7CPW5F:Uw+jjgnbElmH9XqcnW85SbTPuIN
-
Detect XenoRat Payload
-
Xenorat family
-