Deep Malware Analysis of b93ec9979e0164072551a9312ebe1cc4 | md5: b93ec9979e0164072551a9312ebe1cc4 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.28

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	b93ec9979e0164072551a9312ebe1cc4
Sha1	a96c613dadd674f6096313e0f360a95782c989d4
Sha256	ac2d9dec2044d5eae8335eb2ace24a035448c3b2ff52955bb295d69d5cbcbd54
Sha384	ea3038b00d58d045af6b742a0d599ae2ddc5d941101524fbd747cdfdd5302cb97274a7d6e3a4d9f4080e20d98966c7d4
Sha512	27fb72743353c6db6fe08aa87893ef1c4aeb57c3bef1e2252acf7b633fb688ae9a1f8fba7d294e40f19eb39d2538200330a365f59d862405782ecdfc85353295
SSDeep	768:mdhO/poiiUcjlJInXFH9Xqk5nWEZ5SbTDaDWI7CPW55:Qw+jjgn1H9XqcnW85SbTSWIh
TLSH	9023E74C57AC8923E6AF5ABD98324263C7B3E2669532E38F08CCD4E9379338555053A7

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	xeno rat client.exe
Full Name	xeno rat client.exe
EntryPoint	System.Void xeno_rat_client.Program::<Main>(System.String[])
Scope Name	xeno rat client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	xeno rat client
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	64
Main Method	System.Void xeno_rat_client.Program::<Main>(System.String[])
Main IL Instruction Count	7
Main IL	`ldarg.0 <null> call System.Threading.Tasks.Task xeno_rat_client.Program::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>`
Module Name	xeno rat client.exe
Full Name	xeno rat client.exe
EntryPoint	System.Void xeno_rat_client.Program::<Main>(System.String[])
Scope Name	xeno rat client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	xeno rat client
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	64
Main Method	System.Void xeno_rat_client.Program::<Main>(System.String[])
Main IL Instruction Count	7
Main IL	`ldarg.0 <null> call System.Threading.Tasks.Task xeno_rat_client.Program::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>`