b593394a96a6e8589c815eaae68a457cba927d8051505562da5d16726f4c0277

Submit
Reports

Overview

overview

Static

static

Xeno 1.18 FIXED.zip

windows7-x64

Xeno 1.18 FIXED.zip

windows10-2004-x64

net8.0-win...rprint

windows7-x64

net8.0-win...rprint

windows10-2004-x64

net8.0-win...t.json

windows7-x64

net8.0-win...t.json

windows10-2004-x64

net8.0-win...s.json

windows7-x64

net8.0-win...s.json

windows10-2004-x64

net8.0-win...re.pma

windows7-x64

net8.0-win...re.pma

windows10-2004-x64

net8.0-win...54.pma

windows7-x64

net8.0-win...54.pma

windows10-2004-x64

net8.0-win...rl-set

windows7-x64

net8.0-win...rl-set

windows10-2004-x64

net8.0-win...rprint

windows7-x64

net8.0-win...rprint

windows10-2004-x64

net8.0-win...t.json

windows7-x64

net8.0-win...t.json

windows10-2004-x64

net8.0-win...gs.dat

windows7-x64

net8.0-win...gs.dat

windows10-2004-x64

net8.0-win...re.dat

windows7-x64

net8.0-win...re.dat

windows10-2004-x64

net8.0-win...data_0

windows7-x64

net8.0-win...data_0

windows10-2004-x64

net8.0-win...data_1

windows7-x64

net8.0-win...data_1

windows10-2004-x64

net8.0-win...data_2

windows7-x64

net8.0-win...data_2

windows10-2004-x64

net8.0-win...data_3

windows7-x64

net8.0-win...data_3

windows10-2004-x64

net8.0-win...001.gz

windows7-x64

net8.0-win...001.gz

windows10-2004-x64

Resubmissions

12/10/2024, 10:59

241012-m3mgja1frq 6

12/10/2024, 10:54

241012-mzm9na1fjj 8

12/10/2024, 10:51

241012-mx9pwawhjg 7

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12/10/2024, 10:59

Sharing

Copy URL

Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Xeno 1.18 FIXED.zip

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xeno 1.18 FIXED.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Resource

win7-20241010-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Resource

win7-20240729-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66F88D85-3254.pma

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral12

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66F88D85-3254.pma

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Resource

win7-20240729-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral16

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Resource

win7-20241010-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Resource

win7-20241010-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Resource

win7-20240708-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001.gz

Resource

win7-20240903-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001.gz

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Xeno 1.18 FIXED.zip
Size

23.3MB
MD5

d9e7849984e3104859af0f032370693c
SHA1

6bf9f6c6c0b11615ab5c855144cfd7158ef7ae16
SHA256

b593394a96a6e8589c815eaae68a457cba927d8051505562da5d16726f4c0277
SHA512

605be5d92861f9e1382501cd195b9ef5ea5ca0d8099eef2b5db095c954883862445d56e2ecaed7c52efdca71ea35f828c8c8d04059131fee79b4fb4a34170a96
SSDEEP

393216:d+/pKFG+pd2Si/IiPD6cNaX54TUL7jhQA55mfp2O3JBeX54TxLgjhQA55mfruiI8:cRKUlZ6TX5lxshnGX5Aaszuixv

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2500	7zFM.exe
Token: 35	2500	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2500	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Xeno 1.18 FIXED.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2500

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads