6fc3870e9addfde6c38be21602172a0404244e05e013db1c65aca737eb47969a | Triage

Submit
Reports

Overview

overview

Static

static

XenoRat 1.8.7.7z

windows7-x64

1

XenoRat 1.8.7.7z

windows10-2004-x64

7

XenoRat 1....at.dll

windows7-x64

1

XenoRat 1....at.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....un.dll

windows7-x64

1

XenoRat 1....un.dll

windows10-2004-x64

1

XenoRat 1....nc.dll

windows7-x64

1

XenoRat 1....nc.dll

windows10-2004-x64

1

XenoRat 1....ab.dll

windows7-x64

1

XenoRat 1....ab.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....xy.dll

windows7-x64

1

XenoRat 1....xy.dll

windows10-2004-x64

1

XenoRat 1....ol.dll

windows7-x64

1

XenoRat 1....ol.dll

windows10-2004-x64

1

XenoRat 1....ll.dll

windows7-x64

1

XenoRat 1....ll.dll

windows10-2004-x64

1

XenoRat 1....up.dll

windows7-x64

1

XenoRat 1....up.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

Resubmissions

09-01-2025 21:24

250109-z8572s1qbs 10

09-01-2025 21:21

250109-z7apratmar 10

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2025 21:21

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

XenoRat 1.8.7.7z

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

XenoRat 1.8.7.7z

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

XenoRat 1.8.7/plugins/InfoGrab.dll
Size

971KB
MD5

86bf07899c4e9764b0752713fe6f12c9
SHA1

813924938e367a361c1145ce135e078967d7903e
SHA256

11a09734dc3a412ef8130a65a0c06b1ccfc24673d818959cfe50f6b462e33d67
SHA512

bb0ca1445b0215ca3bb85defea6fc902618218be04ce006565753c13e3fb3cf786d8dc0fcbe4f77443be28feefe8331e710d895ae8e0b20455b15e7a8bb94578
SSDEEP

24576:GOGlTjiaeAeOTKAzbARntW+hZxCNqbo6RVX8sa6AtWZl2cFkN:GOGNjiSZTKAzkltDhTCcVX8saTtWycO

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XenoRat 1.8.7\plugins\InfoGrab.dll",#1
1⤵
PID:4916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy