Suspect
PE Executable
MD5: 8f967a1d8f355d4a2c7bb64d04291ed8
Size: 46.59 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 8f967a1d8f355d4a2c7bb64d04291ed8 |
| Sha1 | f336e25759c34dd29dd975466c099877411c8c15 |
| Sha256 | cb5e0d435fbad026262192e4ded328eba2952f35433412cba4d494a2d8661ca5 |
| Sha384 | 8962147a264fac6e078974f10e85cf1c3f9da7797e5a7d2ae3542cffad8ea9ea9040c32794a2cb0092eb7d7773db0ea1 |
| Sha512 | c6e4c7ae6b2abc82d9dc69cd156b7e90b1e1f1e9188c755b07f10034b8f34a10aa4ca9adad0689fc52a72f9bcacbcde2ec60b4a4f2b23f7c37d423d94a6edcc6 |
| SSDeep | 768:IkthM/poiioOlJInyCrIMx9Xqk5nWEZ5SbTDawjI7CPW5p:b2+rgnZ0E9XqcnW85SbTtjIx |
| TLSH | B923F84C5BAC8927E6AF1ABD9832425387B3F3669532E38F08CCD4E9379339554053A7 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | xeno rat client.exe |
| Full Name | xeno rat client.exe |
| EntryPoint | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Scope Name | xeno rat client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xeno rat client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 64 |
| Main Method | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Main IL Instruction Count | 7 |
| Main IL | |
| Module Name | xeno rat client.exe |
| Full Name | xeno rat client.exe |
| EntryPoint | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Scope Name | xeno rat client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xeno rat client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 64 |
| Main Method | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Main IL Instruction Count | 7 |
| Main IL | |