Overview

overview

10

Static

static

10

da0b754dcb...cN.exe

windows7-x64

10

da0b754dcb...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da0b754dcb421abc154a9b341ffe952ec2c046c177937ffe67d0e3914e775e1cN.exe

  • Size

    54KB

  • MD5

    b154eb6e4b4897569bdc63af68f50920

  • SHA1

    8d013e37012aaf3d3aafd942f0c69ea71a409025

  • SHA256

    da0b754dcb421abc154a9b341ffe952ec2c046c177937ffe67d0e3914e775e1c

  • SHA512

    95d45b15456a21102c4ebe19b074d87bda3ddc6e3bd73428bb0ec3d3ed6a4249a67db367d875044f87ac4d401dcd203f78725fdd69140282d7780dcfbc023293

  • SSDEEP

    768:/dhO/poiiUcjlJInvvH9Xqk5nWEZ5SbTDaJWI7CPW5TW/NK+oWP:1w+jjgn3H9XqcnW85SbTAWIi/Y+oa

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    nothingset

  • port

    4444

  • startup_name

    nothingset

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da0b754dcb421abc154a9b341ffe952ec2c046c177937ffe67d0e3914e775e1cN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections