General
- Target https://github.com/moom825/xeno-rat/releases
- Sample260804-kp2yys1xew
Score
10/10
Malware Config
Extracted
Family
-
xenorat
Mutex
-
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
localhost
localhost
-
port
1234
-
startup_name
nothingset
Targets
-
- Target https://github.com/moom825/xeno-rat/releases
Score10/10-
Detect XenoRat Payload
-
Family: XenoRat
XenoRat is a remote access trojan written in C#.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.