Overview

overview

7

Static

static

3

Xeno-v1.0.8-x64.zip

windows11-21h2-x64

7

Xeno-v1.0....rprint

windows11-21h2-x64

3

Xeno-v1.0....t.json

windows11-21h2-x64

3

Xeno-v1.0....ICENSE

windows11-21h2-x64

1

Xeno-v1.0....t Data

windows11-21h2-x64

1

Xeno-v1.0.... Rules

windows11-21h2-x64

1

Xeno-v1.0....les-AA

windows11-21h2-x64

1

Xeno-v1.0....ICENSE

windows11-21h2-x64

1

Xeno-v1.0....art-DE

windows11-21h2-x64

1

Xeno-v1.0....art-ES

windows11-21h2-x64

1

Xeno-v1.0....art-FR

windows11-21h2-x64

1

Xeno-v1.0....art-IT

windows11-21h2-x64

1

Xeno-v1.0....art-NL

windows11-21h2-x64

1

Xeno-v1.0....art-RU

windows11-21h2-x64

1

Xeno-v1.0....art-ZH

windows11-21h2-x64

1

Xeno-v1.0....pet.js

windows11-21h2-x64

3

Xeno-v1.0....rprint

windows11-21h2-x64

3

Xeno-v1.0....t.json

windows11-21h2-x64

3

Xeno-v1.0....ICENSE

windows11-21h2-x64

1

Xeno-v1.0....s.json

windows11-21h2-x64

3

Xeno-v1.0....s.json

windows11-21h2-x64

3

Xeno-v1.0....rprint

windows11-21h2-x64

3

Xeno-v1.0....t.json

windows11-21h2-x64

3

Xeno-v1.0....ations

windows11-21h2-x64

1

Xeno-v1.0...._1.zip

windows11-21h2-x64

1

Xeno-v1.0...._1.zip

windows11-21h2-x64

1

Xeno-v1.0....UI.exe

windows11-21h2-x64

1

Xeno-v1.0....x.html

windows11-21h2-x64

6

Xeno-v1.0....ain.js

windows11-21h2-x64

3

Xeno-v1.0....lua.js

windows11-21h2-x64

3

Xeno-v1.0....sh.dll

windows11-21h2-x64

1

Xeno-v1.0....td.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xeno-v1.0.8-x64.zip

  • Size

    19.1MB

  • Sample

    241107-w6qsssxbqc

  • MD5

    e60bf06c220112cf873add0776e50532

  • SHA1

    00dc3440aeba51e1d1130931e18966cd2764ca35

  • SHA256

    f62fba7996ee3a127d80d0c8e2003ee09d4f278cb4aa1e303e718650aeed0c69

  • SHA512

    15c08a623a5c43fc0eed9ac31818b4dd0b73ab691b12f9aa92c2bfaa4439c7e8b22c8903fdb253ccf4dc913cc50ed87140ea5783d0b3b1dcc2c23d55dd20ab1f

  • SSDEEP

    393216:UV9dl9l7rJ9hJvLehOKt3ScrGt7pErdmv9T8r/n6lRmHob6GzlV91P78K/w2vHDb:U9lpJCDa7Zv98IfpVrAuJU/uoC+S

Score
7/10
discoveryexecution

Malware Config

Targets

    • Target

      Xeno-v1.0.8-x64.zip

    • Size

      19.1MB

    • MD5

      e60bf06c220112cf873add0776e50532

    • SHA1

      00dc3440aeba51e1d1130931e18966cd2764ca35

    • SHA256

      f62fba7996ee3a127d80d0c8e2003ee09d4f278cb4aa1e303e718650aeed0c69

    • SHA512

      15c08a623a5c43fc0eed9ac31818b4dd0b73ab691b12f9aa92c2bfaa4439c7e8b22c8903fdb253ccf4dc913cc50ed87140ea5783d0b3b1dcc2c23d55dd20ab1f

    • SSDEEP

      393216:UV9dl9l7rJ9hJvLehOKt3ScrGt7pErdmv9T8r/n6lRmHob6GzlV91P78K/w2vHDb:U9lpJCDa7Zv98IfpVrAuJU/uoC+S

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.fingerprint

    • Size

      66B

    • MD5

      5bbd09242392aacbb5fac763f9e3bd4e

    • SHA1

      14bb7b23b459ce30193742ed1901a17b4dcf9645

    • SHA256

      22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297

    • SHA512

      541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670

    Score
    3/10
    behavioral2

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json

    • Size

      76B

    • MD5

      ba25fcf816a017558d3434583e9746b8

    • SHA1

      be05c87f7adf6b21273a4e94b3592618b6a4a624

    • SHA256

      0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11

    • SHA512

      3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

    Score
    3/10
    behavioral3

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.55/LICENSE

    • Size

      24KB

    • MD5

      aad9405766b20014ab3beb08b99536de

    • SHA1

      486a379bdfeecdc99ed3f4617f35ae65babe9d47

    • SHA256

      ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d

    • SHA512

      bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

    • SSDEEP

      384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK

    Score
    1/10
    behavioral4

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.55/Ruleset Data

    • Size

      2.8MB

    • MD5

      16176aa639f8d0bf6c1a823f9d973d8c

    • SHA1

      f1f365a4705a3fcab04bc4aa8f080ed7ae2f372c

    • SHA256

      75da3c6add63a83efb735ae0f1f4e6578607ea33187753b0f65f750a1ab0ab34

    • SHA512

      d8711e8a2d417f1f9b81a13d04951420460d1be2dd0459916a3226f364b65cd77fc0feb4be22412df3da0a2433cd924df7d0684fab04a2c6cf3a6e9715ea9f84

    • SSDEEP

      49152:tR7JA+2v9VbvQu0rtJtPCRxWPsDaR0B/1Qnph9PqxC:36vL0Dr9P7

    Score
    1/10
    behavioral5

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Filtering Rules

    • Size

      1.8MB

    • MD5

      a97ea939d1b6d363d1a41c4ab55b9ecb

    • SHA1

      3669e6477eddf2521e874269769b69b042620332

    • SHA256

      97115a369f33b66a7ffcfb3d67c935c1e7a24fc723bb8380ad01971c447cfa9f

    • SHA512

      399cb37e5790effcd4d62b9b09f706c4fb19eb2ab220f1089698f1e1c6f1efdd2f55d9f4c6d58ddbcc64d7a7cf689ab0dbbfae52ce96d5baa53c43775e018279

    • SSDEEP

      24576:y+DPoZGeOT4JQm1zX3nJhS33dpuaQcLzNPNPCoMB50TcpdGGi:FAZxu3dplQcxNPCoMB50TcpYGi

    Score
    1/10
    behavioral6

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Filtering Rules-AA

    • Size

      404KB

    • MD5

      0c692f6db49c8f21392d3365bfc88be9

    • SHA1

      9073d1a2d99e0d0df90d995d60fd096b30f6b585

    • SHA256

      d36eb7f3da47d7cd92f7bbec4314cdd30b58197cd898b13f11729febbd3f75f2

    • SHA512

      2f8e22ca83e9bd5a963dd2f9a00e1ed2faa9d5a3c07efa191ca4bf7c95f404cbabcbf1eeb8633a2270b8460319ce46791c063355368fc08d93442cc0e0250939

    • SSDEEP

      3072:FkBkPxFrILAR6IskEBMIby5VWT8RLl2z4iAejcqosSiFJy+klIDbTgSdUMGXXlkx:FmQEkP2z4PejcqoniFLkhlktvRSI9OIF

    Score
    1/10
    behavioral7

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/LICENSE

    • Size

      24KB

    • MD5

      aad9405766b20014ab3beb08b99536de

    • SHA1

      486a379bdfeecdc99ed3f4617f35ae65babe9d47

    • SHA256

      ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d

    • SHA512

      bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

    • SSDEEP

      384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK

    Score
    1/10
    behavioral8

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-DE

    • Size

      222KB

    • MD5

      68a6f5d3e851f477b99c00e716b9640b

    • SHA1

      1e805450597d71037995ff9bd63a18ad2c74d281

    • SHA256

      cbab2692330b73e6dab4705e0ba5d9bc7829912b7c09eaf5c5f8e6c5e219e2dd

    • SHA512

      b06888174d81a40ad200113186415a7daf207723f5d704160c1c74087192e9a9652bf6b69c58fa927a9e66af35e993f1941352e96403f673ee7e686d8eb4e06e

    • SSDEEP

      6144:OkccZbOdFA+fhs7VxSk6NgKTh51ApmstI1dKcJEttmt4l843qzVb2P5+V5bbwORq:/v4KmNsWoRLYvy

    Score
    1/10
    behavioral9

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-ES

    • Size

      154KB

    • MD5

      4bd0ec01b325a901ca95d03dcb3d0b78

    • SHA1

      3fed6b3ba95cd4b39744a5e6ad7970d5bfe18ec7

    • SHA256

      f47f8980472678dd2caf6c728411ea4a2611c2eed99938ccf4a158296c0a0830

    • SHA512

      28d8f704e4ef7fd4b13938c7c05f50c0e3b92c2753245e363fbe07abb8bd6b96fbacf864f1390031e86d0592034e03e90582fb9910d80b46c6cc3b0282ba6d58

    • SSDEEP

      3072:BZ3bhZ+HacdKOs6e68Gvp6FPdhNhTVO9ePaw/5I/G3Yk6+a:PaszKSh84a+S

    Score
    1/10
    behavioral10

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-FR

    • Size

      748KB

    • MD5

      98df506badc34592073fef20e10b9202

    • SHA1

      9c6084e2f72f8de086f34f749c6f478615a61072

    • SHA256

      c875167cbb5484ecbb6974c6b2b70fa4b28e57c58588964a737605016077ab2e

    • SHA512

      45cc8f5a08b75245840c22777e20702884c9d52a3dcb3a6c70a18b6213ea1df407db0f5d8b1bb63e5a99077b210cbe235e6955486268ded1cdc9a20595dbd633

    • SSDEEP

      6144:xn5IELZCpvVqJ2cdj+3ogXdY7treSUk8rVPbEd7qwsgTBYsV6XyUcdW3EfirhP5z:xC3rhv1Ne0p0ogNTHqwO

    Score
    1/10
    behavioral11

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-IT

    • Size

      498KB

    • MD5

      cf12499d6fb872304778c2d047996675

    • SHA1

      36e442007ec991986b4a8ab67bfe39abaa58117e

    • SHA256

      39a9601eb6c69437ab63ff48bb96d63ae38846d99ef954491bcc803e7cfe6e6a

    • SHA512

      ff914da7d35b91d16d411af54b2adcb3ecb140451dd6763f5c847f8e009bfc4440498a02068e7aa2976c06ef089525204dc5698d2247584378b0cd5bc7457c01

    • SSDEEP

      6144:ZHChVwjPgW2EgV8Nf5mTGnVj27zqxYuBRDr5KdTHRYIm13GOchflRwVF5zGuQe1a:0ufyqxYl2IVhflRwVF5zGuEMEms

    Score
    1/10
    behavioral12

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-NL

    • Size

      50KB

    • MD5

      307ce3a96ec04053472ffcf0e240fea4

    • SHA1

      4c4ed7097641efd298f68b6bb5e4aa7c16d6754c

    • SHA256

      9300c145e737397b404d877ba0e909ed687e8b7add82a6f3b9f3cb9931e0e25b

    • SHA512

      3e98d66a43650289eafdd6c4c76e1da66eb042882f2979b8e774e0df81510bfa7678cf8b4755829c22c258e25136dfd405bd21e5c40973086247408848051955

    • SSDEEP

      768:zXqZNfsMpRvhE7G8tjcbn1uOj8xC6Uq+Wiiv43FWedYn4/Nn+b:zX0ttpRvh6G4+CCJWiiv8K4/NnQ

    Score
    1/10
    behavioral13

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-RU

    • Size

      1.2MB

    • MD5

      5797422ea1700f6036c4bed4384877d9

    • SHA1

      1201305e19faf6311a228b6baa2052ebefa9c4f2

    • SHA256

      daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789

    • SHA512

      f85858ad292ef9e5d4fb6ea9e67f731b4a5fe3b823c2f156ecd109650d9de577873797bfd6d01da37a2baa2e05add60d387821254dc31eab54f4e526895bc83d

    • SSDEEP

      12288:vFdfXbqK1X3AmCZfKd1jjf9FASy2cMPBHdkgKBKltEDYWex8tGlETz4cOsTUzuRj:dVqK1XThy2TtaRRmQH

    Score
    1/10
    behavioral14

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-ZH

    • Size

      839KB

    • MD5

      35488dda885a4de38b56edd487f1ed51

    • SHA1

      3c85fa1afaf24064437abfd72530aa1e675d58c9

    • SHA256

      04ee35c1660783cc17d89b80d5bb76c9c92a4e052d52b2e4cab00897d9c5655b

    • SHA512

      0072570e9cbd6ed811bc22df5c664a152f1c3322f08b43ca9df6daceecb64614198f5600c964f1abd7890d3e811c57dba54bbed763c12d3e245bf7db5dd4d898

    • SSDEEP

      24576:PgAj3MEp3zM86pBrsIOzrEXTAd9VFM4Bnvr5kyTuHs:PgAj3n5T6ptsnzrEXTAd9VXnvr5kyTuM

    Score
    1/10
    behavioral15

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js

    • Size

      2KB

    • MD5

      f5c93c471485f4b9ab45260518c30267

    • SHA1

      ee6e09fb23b6f3f402e409a2272521fdd7ad89ed

    • SHA256

      9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690

    • SHA512

      e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda

    Score
    3/10
    execution
    behavioral16

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/manifest.fingerprint

    • Size

      66B

    • MD5

      570f3c44d7bd9b51c182e73f356a1a88

    • SHA1

      f9b3ebb75facb0ae794c6afbf89a836098c3ee9d

    • SHA256

      8a094577efcce05e14d4d209b13b4cf937f999cac3fb44288ec907940e86687f

    • SHA512

      369048131f8f9a95600a3479857bc90323eef344de92dc2f17dafc4394b08ce22e295373deb1c41317d55409cf1aee17fa947b487aec9551ae361f948ac55bb7

    Score
    3/10
    behavioral17

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/manifest.json

    • Size

      116B

    • MD5

      e39cecf91d50b976575112bafefe9393

    • SHA1

      82e2d1c3cdc771a02ae8989a89dfd1f61647b8b3

    • SHA256

      f7d0ba2c20ffcf2fa230225b4a309a0eb52741eeeb29725b01c289d0067984d6

    • SHA512

      0a63fcb2109d878013ee79fe0789817d9df4445eaec4bb27d663237ada6d035d28946e9a4c2ae0238413f5d404b56536c4095bedbbe6528ba36bbb5f24bcfd02

    Score
    3/10
    behavioral18

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/LICENSE

    • Size

      1KB

    • MD5

      ee002cb9e51bb8dfa89640a406a1090a

    • SHA1

      49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

    • SHA256

      3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

    • SHA512

      d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

    Score
    1/10
    behavioral19

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/_metadata/verified_contents.json

    • Size

      1KB

    • MD5

      f85ce0d2e1806c582954bd831378033e

    • SHA1

      584222c390c8e9d0b85574083b89be48114b7f00

    • SHA256

      e4fa2ded0327c43aa618cc751b8a8704cbec33cdbc28e5ff49d536d58226e5bb

    • SHA512

      08a9f6c42a774287a883a745acf1a17327df19493248c69d8497b6a5ee1a5e9310fb756a3c4c7665624929d4387bf365cae5f6100aa873c04bff2b56932be4a8

    Score
    3/10
    behavioral20

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/keys.json

    • Size

      6KB

    • MD5

      052b398cc49648660aaff778d897c6de

    • SHA1

      d4fdd81f2ee4c8a4572affbfd1830a0c574a8715

    • SHA256

      47ec07ddf9bbd0082b3a2dfea39491090e73a09106945982e395a9f3cb6d88ae

    • SHA512

      ed53d0804a2ef1bc779af76aa39f5eb8ce2edc7f301f365eeaa0cf5a9ab49f2a21a24f52dd0eb07c480078ce2dd03c7fbb088082aea9b7cdd88a6482ae072037

    • SSDEEP

      96:UXq6pG2GE+ryg+BQJ+m0plhYvPuW+wkpTm+ozdswsDm4+uTagSfC3AQj+y:uNtGbraBQgm4lOvMwkoR9PuGs3gy

    Score
    3/10
    behavioral21

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.fingerprint

    • Size

      66B

    • MD5

      056d2edcd3ce728c356722ca447a0272

    • SHA1

      eb8505bf5a4e7f1adf76b011097224c7d50c6b11

    • SHA256

      c1ed8661fc256969b9480682313f02df92b0204a14cb1ff77126df77de285020

    • SHA512

      d663874b56c48effb431c34f5613f80cf844b5fc65a584fffc75f516edb2c73094d849f2665510147956ba40f4233dfa5a4b678f586db7e4449e1e0e9d4a9ec8

    Score
    3/10
    behavioral22

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.json

    • Size

      80B

    • MD5

      077da41a01dde0173ebbf70d3b7210e2

    • SHA1

      4b3c3deeb9522ca4ef4e42efcf63b2674f6a5c07

    • SHA256

      23bed5c8ebea0c376483374bad7baf633a7e52f3e0a609371c518e06e645bda0

    • SHA512

      2822d02e2b3c6306e6d71fa62e7f472b4c3cdf0cbe499b70ac60a0a50e547ed47c394d7de88bbef2e6015920442b9d30cbc0d6869d154e02ec251712f918deec

    Score
    3/10
    behavioral23

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Variations

    • Size

      85B

    • MD5

      bc6142469cd7dadf107be9ad87ea4753

    • SHA1

      72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c

    • SHA256

      b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557

    • SHA512

      47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

    Score
    1/10
    behavioral24

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/component_crx_cache/alpjnmnfbgfkmmpcfpejmmoebdndedno_1.4AF7EE72E9C8E11DAB4124EB233B3B5771D0EE966ECE3055FB251667528D3D0D

    • Size

      221KB

    • MD5

      fa1683845a7bd378d0361963b222299d

    • SHA1

      f564f5e8752b0c2b8f40701116949c4d662dad11

    • SHA256

      4af7ee72e9c8e11dab4124eb233b3b5771d0ee966ece3055fb251667528d3d0d

    • SHA512

      9e249c3ad13dba739b4de279231f4a46be0234a0425997cba418a5ee5633dfc9f51d263ce8d5c92ec1bb8db43f139f7a7be24f0ec7d88794e647caffbfc27c2f

    • SSDEEP

      6144:wBxj2S7Dx01gqo+kCnTm+dKSiz8HX7LeSv9+xrIqUViyTraumoJ:Oxj2Soo8083Dv4xrHUrWTK

    Score
    1/10
    behavioral25

    • Target

      Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/component_crx_cache/eeobbhfgfagbclfofmgbdfoicabjdbkn_1.8BFD50D350D47445B57BB1D61BBDE41CEDA7AC43DC81FCE95BF1AC646D97D2A0

    • Size

      1KB

    • MD5

      e15208ff647aea1698bfa7da5287df5e

    • SHA1

      bc5d6e7d0d71ae1bcac13320ee237ce0adc493f3

    • SHA256

      8bfd50d350d47445b57bb1d61bbde41ceda7ac43dc81fce95bf1ac646d97d2a0

    • SHA512

      07e2435f9e609d92daf97b5c6b75a79c9f8c229facd24999a45d954ad2eda130f7b7deeab6403f8518c5bfe2791b9796952c7ee58023488c90165cb1b0d5f47b

    Score
    1/10
    behavioral26

    • Target

      Xeno-v1.0.8-x64/XenoUI.dll

    • Size

      73KB

    • MD5

      3afc560eeab3dd7c4d4d1efa121e7645

    • SHA1

      da16e9d49d77ca9af5aad37ba638418253e27eef

    • SHA256

      962b2f5dfc883b9dfdf0b996c797b7c67da75fbb8a5fdcb965c2ba0d684caa79

    • SHA512

      7dc2a12412fbfdfe59eb3fd4d2b96bd90fb6bc2b3a3c27c989dd60c7e705f927bd959547c1e15c9ef1df21a388ac3ead189802e12e533a2260c32577c12f9874

    • SSDEEP

      1536:TAcx01STXu1Acv9p9rhygM/APHV5y67sX85:kcOSTXu1AO97H7Pby6755

    Score
    1/10
    behavioral27

    • Target

      Xeno-v1.0.8-x64/bin/Monaco/index.html

    • Size

      164KB

    • MD5

      001dcbb8f41cdcbf9b4d1e3a0ed4b2d2

    • SHA1

      982a05814546017c40771e59e7677b53d84787e9

    • SHA256

      f1d2c52f2803c29585b81d2eff74c56242d27e9619ee6d38081d5604c5bb1951

    • SHA512

      9a4eba2a9314b6f5851997e1db0ecfae8e40da3443d8a5f9df933ccf6a4d75fc330888c8d14818326e15b3dec9ae2f5f7e73cd08c3822dd7eb0b2d753c8cd8fa

    • SSDEEP

      3072:Nk4J09UmmJv8kBpZaFD48VOAGUWYPjDZlLJbRBiPEP8yKUz2Ojmjr8zM3KP7pblM:64J09BA3pZaFD48VOAGUWYPjdlLJbRBS

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral28

    • Target

      Xeno-v1.0.8-x64/bin/Monaco/vs/base/worker/workerMain.js

    • Size

      133KB

    • MD5

      d0ac5294c58e523cddf25bc6d785fa48

    • SHA1

      1b3661b6db36f1b14fd80dc9a739bfc69c68dfe5

    • SHA256

      e90d1a8f116fa74431117a3ad78dde16dde060a4bf7528dfe3d5a3ad6156504b

    • SHA512

      fea07a1ea5d29a3b4c614248655f4d1ddd94c10c6a6b5c8b428a8b4c0cbec7e7492fa0665c5001e65ce167240ffdfc5ac2c2ed14da3d6f508ae8d8b3c8e8eebb

    • SSDEEP

      3072:bzjH/zYJc5c/7tMLrJ78II4F9N8+em5W+:XjH/zYJc5c/76LrJ78I7BL

    Score
    3/10
    execution
    behavioral29

    • Target

      Xeno-v1.0.8-x64/bin/Monaco/vs/basic-languages/lua/lua.js

    • Size

      4KB

    • MD5

      eebda1fdd970433750c115eae2f03865

    • SHA1

      3f1a1cddb99dead013eac825eb418241656d4bf0

    • SHA256

      ac729efb3164f48d6b08f74d4b15060c126a30d40fb4cd4fc9cc94f2e19bd7c7

    • SHA512

      8b188f3ae73a14a9318dce9761312d9dd2360ab00ee36e83ca6b74288a109c91770954db7537fd84a76707a1e79528fffc97f3a718bcd924545b469a1363c9cb

    • SSDEEP

      96:HDGAW6FJJJkCO8evcIWtdrvrg+1/sLMiWAOKjLobLMzD:BWCDqC20IWtZD92pzOKvomD

    Score
    3/10
    execution
    behavioral30

    • Target

      Xeno-v1.0.8-x64/xxhash.dll

    • Size

      46KB

    • MD5

      0e9fecea29b2b3d5ef064e112436e9d1

    • SHA1

      69423218652f7837766ce03fe9edeaf751266cc5

    • SHA256

      73c84884a2ccde1d10bec0820a6661920e70e4b53fa99ad510acf5ed1b36af97

    • SHA512

      bd57bc9b8298faffc091b928537794a50c81d985d60edba7863e2976846cb08fd469c6054ff7ec574df6f0a2aea1fb72ed9cff44fa219e834129876293cd2e93

    • SSDEEP

      768:SAziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3Qi9fCCFmj6I2:SAziR74kgDn2rDRuIrN5mAvgbTgihCCp

    Score
    1/10
    behavioral31

    • Target

      Xeno-v1.0.8-x64/zstd.dll

    • Size

      638KB

    • MD5

      567198a0119e3e2ec94208f1cda7aa28

    • SHA1

      350224b13d1cc2f944a4a2bdd951e9ef80be5784

    • SHA256

      6c63d08182dede465c95e48a235894e598a61cc24e0ba4556637cc9c1a1e0951

    • SHA512

      ed01636af37932dca7aa7709389dba184e16f93aa3be4fe622850df0f791c85111367a10434edf0c986079069a3574e0acdbbac4d9cae9c58fc01f9f034f40ec

    • SSDEEP

      6144:IbauYl+rrR8uT4uB5uWYfO16oMynnjDHM8YHb96pddEybNFZeW8aLx492bDKIbbW:IbauYGT5BYMxjDHM809sddEyb9eWo2W

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
7/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

execution
Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
1/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

discovery
Score
6/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10