6fc3870e9addfde6c38be21602172a0404244e05e013db1c65aca737eb47969a | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

XenoRat 1.8.7.7z

windows7-x64

XenoRat 1.8.7.7z

windows10-2004-x64

1

XenoRat 1....at.dll

windows7-x64

1

XenoRat 1....at.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....un.dll

windows7-x64

1

XenoRat 1....un.dll

windows10-2004-x64

1

XenoRat 1....nc.dll

windows7-x64

1

XenoRat 1....nc.dll

windows10-2004-x64

1

XenoRat 1....ab.dll

windows7-x64

1

XenoRat 1....ab.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....ne.dll

windows7-x64

1

XenoRat 1....ne.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

XenoRat 1....xy.dll

windows7-x64

1

XenoRat 1....xy.dll

windows10-2004-x64

1

XenoRat 1....ol.dll

windows7-x64

1

XenoRat 1....ol.dll

windows10-2004-x64

1

XenoRat 1....ll.dll

windows7-x64

1

XenoRat 1....ll.dll

windows10-2004-x64

1

XenoRat 1....up.dll

windows7-x64

1

XenoRat 1....up.dll

windows10-2004-x64

1

XenoRat 1....er.dll

windows7-x64

1

XenoRat 1....er.dll

windows10-2004-x64

1

Resubmissions

09/01/2025, 21:24

250109-z8572s1qbs 10

09/01/2025, 21:21

250109-z7apratmar 10

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/01/2025, 21:24

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

XenoRat 1.8.7.7z

Resource

win7-20240903-en

xenorat discovery rat trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

XenoRat 1.8.7.7z

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XenoRat 1.8.7/plugins/Chat.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XenoRat 1.8.7/plugins/File manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XenoRat 1.8.7/plugins/Fun.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

XenoRat 1.8.7/plugins/Hvnc.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XenoRat 1.8.7/plugins/InfoGrab.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XenoRat 1.8.7/plugins/KeyLogger.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XenoRat 1.8.7/plugins/KeyLoggerOffline.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

XenoRat 1.8.7/plugins/LiveMicrophone.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

XenoRat 1.8.7/plugins/ProcessManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XenoRat 1.8.7/plugins/Registry Manager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XenoRat 1.8.7/plugins/ReverseProxy.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

XenoRat 1.8.7/plugins/ScreenControl.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

XenoRat 1.8.7/plugins/Shell.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

XenoRat 1.8.7/plugins/Startup.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

XenoRat 1.8.7/plugins/SystemPower.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

XenoRat 1.8.7/plugins/Shell.dll
Size

9KB
MD5

5e3e4438045c426410122210759cc0c8
SHA1

c7858413c6b724135afeb1f878f986b0ae1bfa46
SHA256

81bb6bed470afa97db39d7048dd8d9b7c7786fe8297f51390b5c83b450cdb5e0
SHA512

d0a656048deaab2916bd98f5205bda41686891eff65ee7608117157e4f04ee22dfcd8b9bdccbce1bdd065a1573229c3996122b907a303b8494ad7b730fe5d929
SSDEEP

96:25ATBzB7uwBHfse4hDjl2KQ1dndjVvIibvibKh0c9v5g+m2rwBGbEbrxtZfvPn2k:25kFDMlor1ZT5guvbEJtZ/2WYC

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XenoRat 1.8.7\plugins\Shell.dll",#1
1⤵
PID:4544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy