6fc3870e9addfde6c38be21602172a0404244e05e013db1c65aca737eb47969a | Triage

Submit
Reports

Overview

overview

Static

static

XenoRat 1.8.7.7z

windows7-x64

1

XenoRat 1.8.7.7z

windows10-2004-x64

7

XenoRat 1....at.dll

windows7-x64

1

XenoRat 1....at.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....un.dll

windows7-x64

1

XenoRat 1....un.dll

windows10-2004-x64

1

XenoRat 1....nc.dll

windows7-x64

1

XenoRat 1....nc.dll

windows10-2004-x64

1

XenoRat 1....ab.dll

windows7-x64

1

XenoRat 1....ab.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....xy.dll

windows7-x64

1

XenoRat 1....xy.dll

windows10-2004-x64

1

XenoRat 1....ol.dll

windows7-x64

1

XenoRat 1....ol.dll

windows10-2004-x64

1

XenoRat 1....ll.dll

windows7-x64

1

XenoRat 1....ll.dll

windows10-2004-x64

1

XenoRat 1....up.dll

windows7-x64

1

XenoRat 1....up.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

Resubmissions

09-01-2025 21:24

250109-z8572s1qbs 10

09-01-2025 21:21

250109-z7apratmar 10

Analysis

max time kernel
93s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2025 21:21

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

XenoRat 1.8.7.7z

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

XenoRat 1.8.7.7z

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

XenoRat 1.8.7/plugins/ProcessManager.dll
Size

17KB
MD5

4dac21b4f2984931b9710ca50329023a
SHA1

e92c1284f58e2cf339340ff5496f94f9183f127c
SHA256

8bca46a92123f0435b98174d0d1182016811905c7cae6199176d1d3e94605e67
SHA512

36b9c7c23ebf21fc6523ca309d49966c06eba488cb7ba807f496c9effaff7e31ed8e166cab8392352b7efea3dac748af69c5de0b5cf9275fbc0616c0a75af1a9
SSDEEP

384:GOQdVyeIdKbl512kg3EHEeGdhCaXJbuLUSJZAnVb:GXIeIdKbsEZaZyw

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XenoRat 1.8.7\plugins\ProcessManager.dll",#1
1⤵
PID:4780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy