Analysis
- max time kernel
898s - max time network
475s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
- submitted
23/10/2026, 00:40
General
- Target xeno rat server.exe
- Size 2.0MB
- Sample261023-a1bwssbs8q
- SHA256 3d00a800474ddf382212e003222805bd74665b69cec43b554f91c3cd9edf04c4
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xeno rat server.exe"C:\Users\Admin\AppData\Local\Temp\xeno rat server.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4644-0-0x0000000000E30000-0x0000000001032000-memory.dmp
memory/4644-1-0x0000000006160000-0x0000000006706000-memory.dmp
memory/4644-2-0x0000000005A60000-0x0000000005AF2000-memory.dmp
memory/4644-3-0x0000000005BA0000-0x0000000005BB0000-memory.dmp
memory/4644-4-0x0000000005A30000-0x0000000005A3A000-memory.dmp
memory/4644-5-0x0000000005D40000-0x0000000005D54000-memory.dmp
memory/4644-6-0x0000000009270000-0x000000000928A000-memory.dmp
memory/4644-7-0x0000000009290000-0x00000000092A2000-memory.dmp
memory/4644-8-0x000000000B190000-0x000000000B1B2000-memory.dmp
memory/4644-9-0x0000000005BA0000-0x0000000005BB0000-memory.dmp
memory/4644-10-0x00000000092E0000-0x0000000009392000-memory.dmp
memory/4644-11-0x00000000093C0000-0x0000000009717000-memory.dmp