Overview

overview

10

Static

static

3

488942ee93...50.exe

windows7-x64

10

488942ee93...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

  • Size

    252KB

  • Sample

    250326-af35jsyjv7

  • MD5

    4fb296b647e97520c1d8e794a7721d9f

  • SHA1

    21c47b7e08f1b2aa8c44d9a693cc984110f7ac33

  • SHA256

    488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

  • SHA512

    b3f07df20195fbf156f8d324f0830281c1273bd95aef077804cbf8d2ff322a6c6bf84966c99a8f9f57f3893cae7136946e5b10c8423dfbe72aeca0f7f512d511

  • SSDEEP

    6144:J4cVlpkU7I2lJnqd5qaqb4Aoe7HIJ4FU2bj:Bp73v8AaK7ouHiYD

Score
10/10
xenoratrattrojan

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Targets

    • Target

      488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

    • Size

      252KB

    • MD5

      4fb296b647e97520c1d8e794a7721d9f

    • SHA1

      21c47b7e08f1b2aa8c44d9a693cc984110f7ac33

    • SHA256

      488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

    • SHA512

      b3f07df20195fbf156f8d324f0830281c1273bd95aef077804cbf8d2ff322a6c6bf84966c99a8f9f57f3893cae7136946e5b10c8423dfbe72aeca0f7f512d511

    • SSDEEP

      6144:J4cVlpkU7I2lJnqd5qaqb4Aoe7HIJ4FU2bj:Bp73v8AaK7ouHiYD

    Score
    10/10
    xenoratrattrojan

    • Detect XenoRat Payload

    • XenorRat

      XenorRat is a remote access trojan written in C#.

      trojanratxenorat

    • Xenorat family

      xenorat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks