b593394a96a6e8589c815eaae68a457cba927d8051505562da5d16726f4c0277

Submit
Reports

Overview

overview

Static

static

Xeno 1.18 FIXED.zip

windows7-x64

Xeno 1.18 FIXED.zip

windows10-2004-x64

net8.0-win...rprint

windows7-x64

net8.0-win...rprint

windows10-2004-x64

net8.0-win...t.json

windows7-x64

net8.0-win...t.json

windows10-2004-x64

net8.0-win...s.json

windows7-x64

net8.0-win...s.json

windows10-2004-x64

net8.0-win...re.pma

windows7-x64

net8.0-win...re.pma

windows10-2004-x64

net8.0-win...54.pma

windows7-x64

net8.0-win...54.pma

windows10-2004-x64

net8.0-win...rl-set

windows7-x64

net8.0-win...rl-set

windows10-2004-x64

net8.0-win...rprint

windows7-x64

net8.0-win...rprint

windows10-2004-x64

net8.0-win...t.json

windows7-x64

net8.0-win...t.json

windows10-2004-x64

net8.0-win...gs.dat

windows7-x64

net8.0-win...gs.dat

windows10-2004-x64

net8.0-win...re.dat

windows7-x64

net8.0-win...re.dat

windows10-2004-x64

net8.0-win...data_0

windows7-x64

net8.0-win...data_0

windows10-2004-x64

net8.0-win...data_1

windows7-x64

net8.0-win...data_1

windows10-2004-x64

net8.0-win...data_2

windows7-x64

net8.0-win...data_2

windows10-2004-x64

net8.0-win...data_3

windows7-x64

net8.0-win...data_3

windows10-2004-x64

net8.0-win...001.gz

windows7-x64

net8.0-win...001.gz

windows10-2004-x64

Resubmissions

12-10-2024 10:59

241012-m3mgja1frq 6

12-10-2024 10:54

241012-mzm9na1fjj 8

12-10-2024 10:51

241012-mx9pwawhjg 7

Analysis

max time kernel
60s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
12-10-2024 10:51

Sharing

Copy URL

Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Xeno 1.18 FIXED.zip

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xeno 1.18 FIXED.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Resource

win7-20240729-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66F88D85-3254.pma

Resource

win7-20241010-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral12

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66F88D85-3254.pma

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral13

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral16

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Resource

win7-20240729-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Resource

win7-20241010-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Resource

win7-20241010-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001.gz

Resource

win7-20240729-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001.gz

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
Size

264KB
MD5

f13b585962de24fd69e5080353ba1d3c
SHA1

5ec9537c9d04c2fd517719d0d4e47b22b0f5c549
SHA256

136703dcde8dde9bf7a89ac1d32eab8ffec22c4ec9d09805833ac8b7a7816797
SHA512

cb388525d3ff53444db8d260bc8da2a5c2b897e9d98fdfef1efbabbd414873c7ef255d9256ae67aaafc0e50f1ca298cce9f68a6c47542d102945b813b6cc205b
SSDEEP

6:/M/PXGuEVt00ENP7mWElBufdMGYCCcgJU0OhI:U/PXK00ENPKWEgdMGYCGU0Oa

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\net8.0-windows\Xeno.exe.WebView2\EBWebView\Default\Cache\Cache_Data\data_1
1⤵
PID:2808

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads