6fc3870e9addfde6c38be21602172a0404244e05e013db1c65aca737eb47969a | Triage

Submit
Reports

Overview

overview

Static

static

XenoRat 1.8.7.7z

windows7-x64

1

XenoRat 1.8.7.7z

windows10-2004-x64

7

XenoRat 1....at.dll

windows7-x64

1

XenoRat 1....at.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....un.dll

windows7-x64

1

XenoRat 1....un.dll

windows10-2004-x64

1

XenoRat 1....nc.dll

windows7-x64

1

XenoRat 1....nc.dll

windows10-2004-x64

1

XenoRat 1....ab.dll

windows7-x64

1

XenoRat 1....ab.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....xy.dll

windows7-x64

1

XenoRat 1....xy.dll

windows10-2004-x64

1

XenoRat 1....ol.dll

windows7-x64

1

XenoRat 1....ol.dll

windows10-2004-x64

1

XenoRat 1....ll.dll

windows7-x64

1

XenoRat 1....ll.dll

windows10-2004-x64

1

XenoRat 1....up.dll

windows7-x64

1

XenoRat 1....up.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

Resubmissions

09-01-2025 21:24

250109-z8572s1qbs 10

09-01-2025 21:21

250109-z7apratmar 10

Analysis

max time kernel
93s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2025 21:21

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

XenoRat 1.8.7.7z

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

XenoRat 1.8.7.7z

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

XenoRat 1.8.7/plugins/SystemPower.dll
Size

6KB
MD5

b1aca76ee8c1d3fec6edd3a31f9728d8
SHA1

859338c0a542697338cb72e7b2f07faf9b9fce2c
SHA256

b01ab0fa54986d58b4665492639dbf16ae22e8ab868678ecb0411f06791d8c2f
SHA512

83bba2d5f6826fb614f16f25411ca83a2207a18e4992e9f785efec3383a5461d861cfa1e080e1e3f3a1c69c93b3b237ca9c0c2641c276ab074aaf98ce340cc04
SSDEEP

48:6D8vMrTBK/pal72gw2wS43qLirMZAxW52Qivmd4M2UP+o1nEGh+4PJ6xnckqtts9:Jah2ZSlNWxW5BxZP+UEL4lksUil8

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XenoRat 1.8.7\plugins\SystemPower.dll",#1
1⤵
PID:3820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy