General

  • Target

    Xeno-v1.0.7-x64.zip

  • Size

    4.1MB

  • MD5

    68d369b6116bf94f8eff46594e801f61

  • SHA1

    b18702f9590b3dccdfe8ae3a3847b2cb24e52ded

  • SHA256

    3b6a3eec7f55fd91e8cba4aa803937a57bdb7da5e987767ef9c93f2332b57fee

  • SHA512

    4bff7f96126ee8756193a7132a1246ae87d1e599f9da43b7968b35b90830dff80f1f45967fab334d0c8130d45121dd0a0e2d3a312dbd85ad3fe33872e08ca36a

  • SSDEEP

    98304:SpeSPHPx0NL9Cteaqxt5JwlVLnwphakez+xnDHS9aIh60JTLcRH/sqNJ+zs1:SESfPml9UeaSt5J4uhJesLSZhH4RfnNX

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.0.7-x64.zip
    .zip
  • Xeno-v1.0.7-x64/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.7-x64/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.7-x64/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.7-x64/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.7-x64/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Xeno-v1.0.7-x64/XenoUI.deps.json
  • Xeno-v1.0.7-x64/XenoUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Xeno-v1.0.7-x64/XenoUI.runtimeconfig.json
  • Xeno-v1.0.7-x64/bin/Monaco/index.html
    .html .js polyglot
  • Xeno-v1.0.7-x64/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/basic-languages/lua/lua.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.css
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.js
    .js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Xeno-v1.0.7-x64/bin/Monaco/vs/loader.js
    .js
  • Xeno-v1.0.7-x64/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.7-x64/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.7-x64/runtimes/win-arm64/native/WebView2Loader.dll
  • Xeno-v1.0.7-x64/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.7-x64/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.7-x64/scripts/Dex.lua
    .js
  • Xeno-v1.0.7-x64/scripts/Infinite Yield.lua
    .js
  • Xeno-v1.0.7-x64/scripts/Sine Wave.lua
  • Xeno-v1.0.7-x64/scripts/Spinning Donut.lua
  • Xeno-v1.0.7-x64/scripts/UNCCheckEnv.lua
    .js
  • Xeno-v1.0.7-x64/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.7-x64/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections