General
-
Target
https://gofile.io/d/pQVqON
-
Sample
250330-jlw3vstsgs
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://gofile.io/d/pQVqON
Resource
win10ltsc2021-20250314-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://gofile.io/d/pQVqON
Resource
win11-20250313-en
22 signatures
150 seconds
Malware Config
Extracted
Family
xenorat
C2
127.0.0.1
Mutex
Windows_SoftworksX86
Attributes
-
delay
5000
-
install_path
appdata
-
port
1928
-
startup_name
registryhandler
Targets
-
-
Target
https://gofile.io/d/pQVqON
Score10/10-
Detect XenoRat Payload
-
Xenorat family
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-