General
-
Target
https://gofile.io/d/Fz9DPF
-
Sample
250130-wnanvsylgw
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://gofile.io/d/Fz9DPF
Resource
win11-20241007-en
windows11-21h2-x64
16 signatures
900 seconds
Malware Config
Extracted
Family
xenorat
C2
127.0.0.1
Mutex
Xeno_rat_nd8912d
Attributes
-
delay
5000
-
install_path
nothingset
-
port
5347
-
startup_name
hawktuah
Targets
-
-
Target
https://gofile.io/d/Fz9DPF
Score10/10-
Detect XenoRat Payload
-
Xenorat family
-
Downloads MZ/PE file
-
Executes dropped EXE
-