General
-
Target
a4627694fcef1eb1fad7cfb9f91eb61463cdb91c80355071cfbea90ee9dbe8b7.exe
-
Size
45KB
-
Sample
250216-lx95zasjcm
-
MD5
14b3ac6ce95931602a001a92a6d0c95e
-
SHA1
c497445110184147f455fa7924e238dcb87d1f9c
-
SHA256
a4627694fcef1eb1fad7cfb9f91eb61463cdb91c80355071cfbea90ee9dbe8b7
-
SHA512
3458dd80154550bb416a3204a24ac04dcafe3285337b5e0b52766ef85836159ca97dcb6893c1ab40ccdfb5c54a3a7810ec690c675ebaff2140c9b202e661388c
-
SSDEEP
768:RdhO/poiiUcjlJInYTwH9Xqk5nWEZ5Eb2DoWI7CPW5pz:Pw+jjgnJH9XqcnW85Eb20WIBz
Behavioral task
behavioral1
Sample
a4627694fcef1eb1fad7cfb9f91eb61463cdb91c80355071cfbea90ee9dbe8b7.exe
Resource
win7-20240903-en
Malware Config
Extracted
xenorat
192.168.56.1
Xeno_rat_nd8612d
-
delay
5000
-
install_path
temp
-
port
2137
-
startup_name
process.exe
Targets
-
-
Target
a4627694fcef1eb1fad7cfb9f91eb61463cdb91c80355071cfbea90ee9dbe8b7.exe
-
Size
45KB
-
MD5
14b3ac6ce95931602a001a92a6d0c95e
-
SHA1
c497445110184147f455fa7924e238dcb87d1f9c
-
SHA256
a4627694fcef1eb1fad7cfb9f91eb61463cdb91c80355071cfbea90ee9dbe8b7
-
SHA512
3458dd80154550bb416a3204a24ac04dcafe3285337b5e0b52766ef85836159ca97dcb6893c1ab40ccdfb5c54a3a7810ec690c675ebaff2140c9b202e661388c
-
SSDEEP
768:RdhO/poiiUcjlJInYTwH9Xqk5nWEZ5Eb2DoWI7CPW5pz:Pw+jjgnJH9XqcnW85Eb20WIBz
-
Detect XenoRat Payload
-
Xenorat family
-
Downloads MZ/PE file
-