xenorat | e7b275d70655db9cb43fa606bbe2e4f22478ca4962bbf9f299d66eda567d63cd | Triage™

Resubmissions

10/01/2025, 18:41

250110-xb792avlhq10

10/01/2025, 18:41

250110-xbrbhssld110

10/01/2025, 18:40

250110-xbdenasldt10

10/01/2025, 18:39

250110-xayn7sslcv10

Sharing

Copy URL Twitter E-mail

General

Target
Release.zip
Size 6.4MB
Sample250110-xbdenasldt
SHA256 e7b275d70655db9cb43fa606bbe2e4f22478ca4962bbf9f299d66eda567d63cd
MD5 89661a9ff6de529497fec56a112bf75e
SHA1 2dd31a19489f4d7c562b647f69117e31b894b5c3
SHA512 33c765bf85fbec0e58924ece948b80a7d73b7577557eaac8865e481c61ad6b71f8b5b846026103239b3bd21f438ff0d7c1430a51a4a149f16a215faad6dab68f
SSDEEP 196608:SYNI1S7C6S230UwVLW83FUSA7WQZzwM3/C2cM7m2:rNIs7CDvB1USA7WS/vcx2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xenorat linux

Malware Config

Extracted

Family

xenorat

C2

localhost

Mutex

testing 123123

Attributes

delay
1000
install_path
nothingset
port
1234
startup_name
nothingset

Targets

- Target
  plugins/Chat.dll
- Size 11KB
- SHA256 fe7677898bda46cd4b88d779b83545c2741f047ba45a3b45cbf3e6912b5d0a14
- MD5 0e5695b84313f7ed7b86dbba80b0342a
- SHA1 1db6a341dc01460c0c42690e42e2af2c57e53a4a
- SHA512 b8b67521ae69968bb5e0567a646b1b99fa8ec0db74fd7fc1e2482d036e775f7103163bcd2a6d6194d9e3e24efdd25bdcba35e1f76dadd79b01d762da8df28b58
- SSDEEP 192:Xt5SEw0NmpdxSE2sECoxmTNny9+EUrcya8Vk3h:9EP0NmR+CoxmTNng+EPy1Vk3h
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  plugins/File manager.dll
- Size 16KB
- SHA256 fa08d4b54719f477eee7a7ce9d75dd84bc123e7f8b8546a1e2a394743fa319df
- MD5 0746f23b790fd439980d155a75e6275b
- SHA1 c851f8b269cb82ed1a1dab1dc106edd5e95b6d04
- SHA512 2569ad1c09cfb478cfba3ca44276cea443de91a1e66181968388052f0d06cd8be497c5959c0863709d89ab380bcdb3edccfed4fa7207f16ec340474f45bb6bc9
- SSDEEP 384:AAlqtn09rDgrPhQJBLjQ2z0A7VBvBGQEwZmya1HGrJxEKNX:f52qHMe0A7Vlo331mrJbNX
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  plugins/Fun.dll
- Size 10KB
- SHA256 cbf43a078e26e01184b89bb54f0469291946061426fbcf0ecaf6c205bd898812
- MD5 b7c76350514a33374f4597d219d9fec1
- SHA1 f29cad3c62c7c827b1c46a412b842c71ad8f7fe3
- SHA512 a9c7fd686d73987de75103e772471c084a2913a5087fe827763ac01ec5960abac77d00409ba8cabbea0260c27561975a1519392a845f4dcb842c3e02d1ccf202
- SSDEEP 192:mySQnh/1lrzXHfvzHfR8B+E9E1gdZ9ONBh6:mpQnh/rnXHfvLfSt9E1+O3h6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  plugins/Hvnc.dll
- Size 44KB
- SHA256 b029348ff669a2ec5f042376f0b31049688437c7b6ce1d7c36fb7f03d4224932
- MD5 5353c15bee04dcac54f80dd7d5660b21
- SHA1 2663966150926b2528e4f04913b97bfd7ef988b7
- SHA512 3a1ec391fd8e7008d6398078007d0eab071c2b563cd05bd0e3228e3b73e775ec2504b39c81989a3d928c5a6afc1797ae76dd3079ba1515f60813f9b34e7ac9f9
- SSDEEP 768:x6WH72TsRqvj62N0MPVxKVgr3TcJoQ8je8WHJiCVg5t3l8hpo31e5TtOR6iKPeyH:0WH7b2N0kVQVgrjcaQ8je8iJ3ot1cmaZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  plugins/InfoGrab.dll
- Size 971KB
- SHA256 11a09734dc3a412ef8130a65a0c06b1ccfc24673d818959cfe50f6b462e33d67
- MD5 86bf07899c4e9764b0752713fe6f12c9
- SHA1 813924938e367a361c1145ce135e078967d7903e
- SHA512 bb0ca1445b0215ca3bb85defea6fc902618218be04ce006565753c13e3fb3cf786d8dc0fcbe4f77443be28feefe8331e710d895ae8e0b20455b15e7a8bb94578
- SSDEEP 24576:GOGlTjiaeAeOTKAzbARntW+hZxCNqbo6RVX8sa6AtWZl2cFkN:GOGNjiSZTKAzkltDhTCcVX8saTtWycO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  plugins/KeyLogger.dll
- Size 12KB
- SHA256 cb199fb2fee33300cea0f9b30ad0d3287206c4b1fe380eaa4fa7040b184510a5
- MD5 1e8ff2a86962488515380c6a27a775c3
- SHA1 39e1f2f4f9e113e7657abc4adafc8fbd0a5ad016
- SHA512 b50ba227037580e1d68eb4ca9a4a751739152716b9e11e2b2b8e6ca0254f043a76e58d3a7e4b790c3cfb46fa1b6676bd74285b6801f1f0c0d00565c4f78f7168
- SSDEEP 192:Wv+i+cBHIDQkHTvckioy8p4Wbj5Lg3iZEYiRL9eT0pqfAp0FSkiXHB3K:Wv+ifODQkHTvBi8Rbj5zEYiR9eT0pqf7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  plugins/KeyLoggerOffline.dll
- Size 22KB
- SHA256 3414c471c425ab070896e77df290debd5708748d02cd48952c69133795b4abe1
- MD5 4cf2a22b5fefa18e2ab36a1d73f79833
- SHA1 eb38e955e34998235040da965979e09d5d88df6d
- SHA512 0ad3666f9f6b942be9c48cf9d24660faa0b5aa3184e08d9c1b9414220b60cbbfab19c8a082f72c79949edc3ca1b446e53d0f1452e569f531b90ca768f0550161
- SSDEEP 384:tgqiSBJEMs8uohRFeD4nws5lGHEKVUQlDUqajk7oHVEzipi9eT0pqfAp0FSFzJDJ:acYJn6lGkiHlDF/oHBoz9JDVz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  plugins/LiveMicrophone.dll
- Size 494KB
- SHA256 77a9318b937fbc733f5a53c12ce1cbc57aa49504840da6e33f34a1750879a8f5
- MD5 afb916213f3419be21a061b782793c6e
- SHA1 6625e390d96820483db6fc9efba739456a0f2fe1
- SHA512 253ca98f2a6b351f2a28f38a18a34ecb7583dee5895fac871cdc0f08dce51a04fec9e684d0a459b147ae6588c67c7c841b6bb32f510c529ddcc3460e45ab9d98
- SSDEEP 6144:S7E2hItIqKU1zPf7sQwd4h4dY2S/rfWTEFB44PjrKkpArI9ZQf9yZ86DyXLmqwH5:SjHUlxd2STf44PjrKWYmVn6D0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32