Overview
overview
6Static
static
3Xeno-v1.0....re.dll
windows7-x64
1Xeno-v1.0....re.dll
windows10-2004-x64
1Xeno-v1.0....ms.dll
windows7-x64
1Xeno-v1.0....ms.dll
windows10-2004-x64
1Xeno-v1.0....pf.dll
windows7-x64
1Xeno-v1.0....pf.dll
windows10-2004-x64
1Xeno-v1.0....no.dll
windows7-x64
1Xeno-v1.0....no.dll
windows10-2004-x64
1Xeno-v1.0....no.exe
windows7-x64
1Xeno-v1.0....no.exe
windows10-2004-x64
1Xeno-v1.0....UI.exe
windows7-x64
1Xeno-v1.0....UI.exe
windows10-2004-x64
1Xeno-v1.0....x.html
windows7-x64
6Xeno-v1.0....x.html
windows10-2004-x64
6Xeno-v1.0....ain.js
windows7-x64
3Xeno-v1.0....ain.js
windows10-2004-x64
3Xeno-v1.0....lua.js
windows7-x64
3Xeno-v1.0....lua.js
windows10-2004-x64
3Xeno-v1.0....ain.js
windows7-x64
3Xeno-v1.0....ain.js
windows10-2004-x64
3Xeno-v1.0.....de.js
windows7-x64
3Xeno-v1.0.....de.js
windows10-2004-x64
3Xeno-v1.0.....es.js
windows7-x64
3Xeno-v1.0.....es.js
windows10-2004-x64
3Xeno-v1.0.....fr.js
windows7-x64
3Xeno-v1.0.....fr.js
windows10-2004-x64
3Xeno-v1.0.....it.js
windows7-x64
3Xeno-v1.0.....it.js
windows10-2004-x64
3Xeno-v1.0.....ja.js
windows7-x64
3Xeno-v1.0.....ja.js
windows10-2004-x64
3Xeno-v1.0....nls.js
windows7-x64
3Xeno-v1.0....nls.js
windows10-2004-x64
3Resubmissions
21-09-2024 22:06
240921-1z6b5awgnn 821-09-2024 22:05
240921-1zty4awglr 321-09-2024 22:05
240921-1zqxfawgjc 621-09-2024 21:52
240921-1rgzkawcrl 821-09-2024 21:52
240921-1rav9awcqm 621-09-2024 21:43
240921-1lcgwsvhnc 321-09-2024 21:43
240921-1k2emawakn 621-09-2024 21:42
240921-1ks39avhkg 621-09-2024 21:34
240921-1eswasvfrl 6Analysis
-
max time kernel
29s -
max time network
21s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21-09-2024 21:34
Static task
static1
Behavioral task
behavioral1
Sample
Xeno-v1.0.5-x64/Microsoft.Web.WebView2.Core.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Xeno-v1.0.5-x64/Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Xeno-v1.0.5-x64/Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Xeno-v1.0.5-x64/Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Xeno-v1.0.5-x64/Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Xeno-v1.0.5-x64/Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Xeno-v1.0.5-x64/Xeno.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Xeno-v1.0.5-x64/Xeno.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Xeno-v1.0.5-x64/Xeno.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Xeno-v1.0.5-x64/Xeno.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Xeno-v1.0.5-x64/XenoUI.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Xeno-v1.0.5-x64/XenoUI.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Xeno-v1.0.5-x64/bin/Monaco/index.html
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Xeno-v1.0.5-x64/bin/Monaco/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/base/worker/workerMain.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral31
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Xeno-v1.0.5-x64/bin/Monaco/vs/editor/editor.main.nls.js
Resource
win10v2004-20240802-en
General
-
Target
Xeno-v1.0.5-x64/XenoUI.exe
-
Size
63KB
-
MD5
b6a319a989207745fa7f5337f941893a
-
SHA1
688b121b73605bc37d03a193f8226fba74aa8582
-
SHA256
fa8ceec373f352d960321f2eead2266eb7fe0c79ed6f4f2ca0944e6c5d506641
-
SHA512
79068fa9f8b23a97416a50fa3d26f0bb938ddead3424a99bed442b15e445d64126869a2ea2dfa7bfe7d3c4949c01947b8cc362b434bcffc00e36ac56fe00b483
-
SSDEEP
1536:kAB7LNpg9Tr/mGZrBMp9QllM/APHV5y67s0P9:kz9Tr/mGZlM7G7Pby67J9
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2960 wrote to memory of 2272 2960 XenoUI.exe 28 PID 2960 wrote to memory of 2272 2960 XenoUI.exe 28 PID 2960 wrote to memory of 2272 2960 XenoUI.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\Xeno-v1.0.5-x64\XenoUI.exe"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.0.5-x64\XenoUI.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2960 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2960 -s 5002⤵PID:2272
-
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:2892