d55c551cfef397198b98a73d8b43bed2bcbe432b33aa48c7b7d49ecbdc298672

Submit
Reports

Overview

overview

Static

static

Xeno-v1.0....re.dll

windows11-21h2-x64

Xeno-v1.0....ms.dll

windows11-21h2-x64

Xeno-v1.0....pf.dll

windows11-21h2-x64

Xeno-v1.0....no.dll

windows11-21h2-x64

Xeno-v1.0....no.exe

windows11-21h2-x64

Xeno-v1.0....UI.exe

windows11-21h2-x64

Xeno-v1.0....x.html

windows11-21h2-x64

Xeno-v1.0....ain.js

windows11-21h2-x64

Xeno-v1.0....lua.js

windows11-21h2-x64

Xeno-v1.0....ain.js

windows11-21h2-x64

Xeno-v1.0.....de.js

windows11-21h2-x64

Xeno-v1.0.....es.js

windows11-21h2-x64

Xeno-v1.0.....fr.js

windows11-21h2-x64

Xeno-v1.0.....it.js

windows11-21h2-x64

Xeno-v1.0.....ja.js

windows11-21h2-x64

Xeno-v1.0....nls.js

windows11-21h2-x64

Xeno-v1.0.....ko.js

windows11-21h2-x64

Xeno-v1.0.....ru.js

windows11-21h2-x64

Xeno-v1.0....-cn.js

windows11-21h2-x64

Xeno-v1.0....-tw.js

windows11-21h2-x64

Xeno-v1.0....der.js

windows11-21h2-x64

Xeno-v1.0....64.dll

windows11-21h2-x64

Xeno-v1.0....64.dll

windows11-21h2-x64

Xeno-v1.0....er.dll

windows11-21h2-x64

Xeno-v1.0....er.dll

windows11-21h2-x64

Xeno-v1.0....er.dll

windows11-21h2-x64

Xeno-v1.0....Dex.js

windows11-21h2-x64

Xeno-v1.0....eld.js

windows11-21h2-x64

Xeno-v1.0....Env.js

windows11-21h2-x64

Xeno-v1.0....sh.dll

windows11-21h2-x64

Xeno-v1.0....td.dll

windows11-21h2-x64

Analysis

max time kernel
2s
max time network
6s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
02-10-2024 01:21

Sharing

Copy URL

Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Xeno-v1.0.6-x64/Microsoft.Web.WebView2.Core.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xeno-v1.0.6-x64/Microsoft.Web.WebView2.WinForms.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Xeno-v1.0.6-x64/Microsoft.Web.WebView2.Wpf.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Xeno-v1.0.6-x64/Xeno.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Xeno-v1.0.6-x64/Xeno.exe

Resource

win11-20240802-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

Xeno-v1.0.6-x64/XenoUI.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Xeno-v1.0.6-x64/bin/Monaco/index.html

Resource

win11-20240802-en

discovery

windows11-21h2-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/base/worker/workerMain.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/basic-languages/lua/lua.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.de.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.es.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.it.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Xeno-v1.0.6-x64/bin/Monaco/vs/loader.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Xeno-v1.0.6-x64/libcrypto-3-x64.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Xeno-v1.0.6-x64/libssl-3-x64.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Xeno-v1.0.6-x64/runtimes/win-arm64/native/WebView2Loader.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Xeno-v1.0.6-x64/runtimes/win-x64/native/WebView2Loader.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Xeno-v1.0.6-x64/runtimes/win-x86/native/WebView2Loader.dll

Resource

win11-20240802-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Xeno-v1.0.6-x64/scripts/Dex.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Xeno-v1.0.6-x64/scripts/Infinite Yield.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Xeno-v1.0.6-x64/scripts/UNCCheckEnv.js

Resource

win11-20240802-en

execution

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Xeno-v1.0.6-x64/xxhash.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Xeno-v1.0.6-x64/zstd.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Xeno-v1.0.6-x64/Xeno.exe
Size

140KB
MD5

e2f237fa86a3fbe62716af458a441fc5
SHA1

bfe17d703c22e345fdf3b5459492097551528014
SHA256

9ce002f898185a25d05959586be0d2305df0c25411c1dfeb5dbf602944e9de0e
SHA512

00fe7f3b7aac157dcaaa76a3fff891ccd90c070aecc8f3e2f7aa09497e07d3c34a152d5f9c4f5ccc931c32937ef4b895dad8f7a4f2e0586108674172361f72ed
SSDEEP

3072:rjK4UGDHXrQ8hy7qgpHulWD9ZvZ5Pf3Ca10xuZ04ntfOUhBu77:rjK4TDUqgpqWDLZ5H+xuZ04nhA

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
2	raw.githubusercontent.com

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
916	Xeno.exe
916	Xeno.exe
916	Xeno.exe
916	Xeno.exe
916	Xeno.exe
916	Xeno.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.0.6-x64\Xeno.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.0.6-x64\Xeno.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads