General

  • Target

    https://gofile.io/d/Fz9DPF

  • Sample

    250130-wnanvsylgw

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    5000

  • install_path

    nothingset

  • port

    5347

  • startup_name

    hawktuah

Targets

MITRE ATT&CK Enterprise v15

Tasks