Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHub
Tags
Common Information
| Type | Value |
|---|---|
| UUID | d3a9fffb-0832-4cbe-96f2-61045c85cfad |
| Fingerprint | e9049f59c9f2a7ed |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 3, 2024, midnight |
| Added to db | Oct. 9, 2024, 8:26 p.m. |
| Last updated | Nov. 14, 2024, 4:12 p.m. |
| Headline | Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHub |
| Title | Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHub |
| Detected Hints/Tags/Attributes | 55/2/30 |
Source URLs
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | hunt.io | hunt.io |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | people-weekend.gl.at |
|
| Details | Domain | 1 | anyone-blogging.gl.at |
|
| Details | Domain | 1 | performance-ha.gl.at |
|
| Details | Domain | 1 | character-acquisitions.gl.at |
|
| Details | Domain | 1 | related-directed.gl.at |
|
| Details | Domain | 1 | david-login.gl.at |
|
| Details | Domain | 1 | taking-headquarters.gl.at |
|
| Details | Domain | 7 | portmap.io |
|
| Details | Domain | 1 | anyone-blogging.gl.at.ply.gg |
|
| Details | Domain | 57 | hunt.io |
|
| Details | File | 10 | at.pl |
|
| Details | File | 69 | client.exe |
|
| Details | File | 9 | 2.rar |
|
| Details | File | 1 | 4d820f671919b3029173d8659aa59600_neikianalytics.exe |
|
| Details | File | 1 | a3254b90b2c6e12c29f7d9f538087da2d4bb7f64d003c591c8936cee7dd74b39.exe |
|
| Details | File | 1 | testingrat.exe |
|
| Details | File | 1 | wavepretest.rar |
|
| Details | File | 1 | xeno.exe |
|
| Details | File | 28 | loader.exe |
|
| Details | File | 16 | launcher.exe |
|
| Details | sha1 | 1 | 38ce2a41d59a1bf0f3332fb867f43794c39577af |
|
| Details | sha1 | 1 | 2051551c6c0f18eaf3c4cf45ffe6119e582c19ae |
|
| Details | sha1 | 1 | af68a0b9e9c58dcbdd2ede205c30537bca39650c |
|
| Details | sha1 | 1 | 029f3396c39f543dd984031eb82edcc035ed0a25 |
|
| Details | sha1 | 1 | e9251ef1dd3ebe4f17acf0b3552e22751009c8c1 |
|
| Details | sha1 | 1 | 5e7138c7ee8a1de9d041804fd11ac0ba63cb1f34 |
|
| Details | sha1 | 1 | 707c68257c2ea97fa4591f58be326e1308fd1106 |
|
| Details | sha1 | 1 | 7c7408870da2fe079aa460fe0d237e12e19cb7cb |
|
| Details | sha1 | 1 | 33ac2b2d228a1ec93b0ea70ffadb436933b9a1e5 |
|
| Details | sha256 | 1 | a3254b90b2c6e12c29f7d9f538087da2d4bb7f64d003c591c8936cee7dd74b39 |