Extracted

• • Target

    sigmacode.exe

  • Size

    45KB

  • MD5

    4fbef0899b35ae09ba0d601cba569e54

  • SHA1

    49e1f7939dc5ad245a26f5c5762bec1d4730f797

  • SHA256

    3f2a0056e6fe0575d5823732d1e4549ee0c3cf9d196637b8589a0432a46f59e7

  • SHA512

    bcd3ae5fb14bf7f3d49520afa00c47360ddd178bbc1b8fb8490b18280495a708efc23afb6b08693c71b7cad410b6241cf545448103d0afaf9c649806376b5908

  • SSDEEP

    768:KdhO/poiiUcjlJInvbqmH9Xqk5nWEZ5SbTDaxWI7CPW5h:sw+jjgnzH9XqcnW85SbTgWIZ

  Score

  10^/10

  xenoratdiscoveryratspywarestealertrojan

  • Detect XenoRat Payload

  • XenorRat

    XenorRat is a remote access trojan written in C#.

    trojanratxenorat

  • Xenorat family

    xenorat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2