b593394a96a6e8589c815eaae68a457cba927d8051505562da5d16726f4c0277

Submit
Reports

Overview

overview

Static

static

Xeno 1.18 FIXED.zip

windows7-x64

Xeno 1.18 FIXED.zip

windows10-2004-x64

net8.0-win...rprint

windows7-x64

net8.0-win...rprint

windows10-2004-x64

net8.0-win...t.json

windows7-x64

net8.0-win...t.json

windows10-2004-x64

net8.0-win...s.json

windows7-x64

net8.0-win...s.json

windows10-2004-x64

net8.0-win...re.pma

windows7-x64

net8.0-win...re.pma

windows10-2004-x64

net8.0-win...54.pma

windows7-x64

net8.0-win...54.pma

windows10-2004-x64

net8.0-win...rl-set

windows7-x64

net8.0-win...rl-set

windows10-2004-x64

net8.0-win...rprint

windows7-x64

net8.0-win...rprint

windows10-2004-x64

net8.0-win...t.json

windows7-x64

net8.0-win...t.json

windows10-2004-x64

net8.0-win...gs.dat

windows7-x64

net8.0-win...gs.dat

windows10-2004-x64

net8.0-win...re.dat

windows7-x64

net8.0-win...re.dat

windows10-2004-x64

net8.0-win...data_0

windows7-x64

net8.0-win...data_0

windows10-2004-x64

net8.0-win...data_1

windows7-x64

net8.0-win...data_1

windows10-2004-x64

net8.0-win...data_2

windows7-x64

net8.0-win...data_2

windows10-2004-x64

net8.0-win...data_3

windows7-x64

net8.0-win...data_3

windows10-2004-x64

net8.0-win...001.gz

windows7-x64

net8.0-win...001.gz

windows10-2004-x64

Resubmissions

12-10-2024 10:59

241012-m3mgja1frq 6

12-10-2024 10:54

241012-mzm9na1fjj 8

12-10-2024 10:51

241012-mx9pwawhjg 7

Analysis

max time kernel
91s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2024 10:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Xeno 1.18 FIXED.zip

Resource

win7-20241010-en

windows7-x64

24 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xeno 1.18 FIXED.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66F88D85-3254.pma

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral12

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66F88D85-3254.pma

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Resource

win7-20241010-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral16

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Resource

win7-20240729-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Resource

win7-20241010-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Resource

win7-20241010-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Resource

win7-20241010-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001.gz

Resource

win7-20240903-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

net8.0-windows/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001.gz

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

net8.0-windows/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set
Size

21KB
MD5

d246e8dc614619ad838c649e09969503
SHA1

70b7cf937136e17d8cf325b7212f58cba5975b53
SHA256

9dd9fba7c78050b841643e8d12e58ba9cca9084c98039f1ebff13245655652e1
SHA512

736933316ee05520e7839db46da466ef94e5624ba61b414452b818b47d18dcd80d3404b750269da04912dde8f23118f6dfc9752c7bdf1afc5e07016d9c055fdb
SSDEEP

384:Vt71+czeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1pBu:j4sBwVPDdFhVyYoPWUiuXeG0K5dQYXFr

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\net8.0-windows\Xeno.exe.WebView2\EBWebView\CertificateRevocation\6498.2023.8.1\crl-set
1⤵
PID:3464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads