General

  • Target

    d3cf947d7de87f91088ebaa37e34b062c3c55231134ace457cb3f8507c373243

  • Size

    45KB

  • MD5

    840fa8abb722e9df060e055f9e13802c

  • SHA1

    37a89afc9b1487b7bdb77122c7f100b89d3fc50d

  • SHA256

    d3cf947d7de87f91088ebaa37e34b062c3c55231134ace457cb3f8507c373243

  • SHA512

    d86d5b3a988fbeb884a15383b888715432e3cab36953f08e1719640cb9d3bf8382495fbb3b4b317f55288407e70643f7598c70421d0c5c4d9d221e892de89783

  • SSDEEP

    768:LKpu9Tv4A4QfJkwINr8I0SeMhQoRFywB/ZXD5DtZ9bEUjYfAFkv:uc9z4rQfwNr8QeMuoiwBx5Dz9bEAYfoq

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

62.122.202.186

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3cf947d7de87f91088ebaa37e34b062c3c55231134ace457cb3f8507c373243
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections