86a967082cb9118c3271a925a53aa346

PE Executable

MD5: 86a967082cb9118c3271a925a53aa346

Size: 51.2 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	86a967082cb9118c3271a925a53aa346
Sha1	c0a5cc70f6f87bd237ef08cd6b279aa395f8a675
Sha256	868b6edee89aeee834a2d96d1534017b82304d3fbf33b07dd8d5d6184dea554e
Sha384	db4b659eee73a263926ba90209e3fa395c3a8fabeb98a809def72012d6f3149d816eb4715983ab3ab7260d0471caf84a
Sha512	ca74b6a91b8d3154c9eaddb24be31eccacb9ec1e950d684bcc817034926bd196b9f51a9d8d27eeef89045fe2dc7814a816d2a5478ae10274315778326ebc4758
SSDeep	1536:hw+jjgnByH9XqcnW85SbTtWI8OcfwcoOq7rCmoeOQyC:hw+jqq91UbTtWOcfwcoOq7rCmoeOQyC
TLSH	0C33F84D576D8923E69F2ABC9471425387B3F223A432E38F58CC9EEA37933854805393

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name	Value
Module Name	xeno rat client.exe
Full Name	xeno rat client.exe
EntryPoint	System.Void xeno_rat_client.Program::<Main>(System.String[])
Scope Name	xeno rat client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	xeno rat client
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	64
Main Method	System.Void xeno_rat_client.Program::<Main>(System.String[])
Main IL Instruction Count	7
Main IL	`ldarg.0 <null> call System.Threading.Tasks.Task xeno_rat_client.Program::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>`
Info	PE Detect: PeReader OK (file layout)
Module Name	xeno rat client.exe
Full Name	xeno rat client.exe
EntryPoint	System.Void xeno_rat_client.Program::<Main>(System.String[])
Scope Name	xeno rat client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	xeno rat client
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	64
Main Method	System.Void xeno_rat_client.Program::<Main>(System.String[])
Main IL Instruction Count	7
Main IL	`ldarg.0 <null> call System.Threading.Tasks.Task xeno_rat_client.Program::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.