Overview
overview
7Static
static
3Xeno-v1.0.8-x64.zip
windows11-21h2-x64
7Xeno-v1.0....rprint
windows11-21h2-x64
3Xeno-v1.0....t.json
windows11-21h2-x64
3Xeno-v1.0....ICENSE
windows11-21h2-x64
1Xeno-v1.0....t Data
windows11-21h2-x64
1Xeno-v1.0.... Rules
windows11-21h2-x64
1Xeno-v1.0....les-AA
windows11-21h2-x64
1Xeno-v1.0....ICENSE
windows11-21h2-x64
1Xeno-v1.0....art-DE
windows11-21h2-x64
1Xeno-v1.0....art-ES
windows11-21h2-x64
1Xeno-v1.0....art-FR
windows11-21h2-x64
1Xeno-v1.0....art-IT
windows11-21h2-x64
1Xeno-v1.0....art-NL
windows11-21h2-x64
1Xeno-v1.0....art-RU
windows11-21h2-x64
1Xeno-v1.0....art-ZH
windows11-21h2-x64
1Xeno-v1.0....pet.js
windows11-21h2-x64
3Xeno-v1.0....rprint
windows11-21h2-x64
3Xeno-v1.0....t.json
windows11-21h2-x64
3Xeno-v1.0....ICENSE
windows11-21h2-x64
1Xeno-v1.0....s.json
windows11-21h2-x64
3Xeno-v1.0....s.json
windows11-21h2-x64
3Xeno-v1.0....rprint
windows11-21h2-x64
3Xeno-v1.0....t.json
windows11-21h2-x64
3Xeno-v1.0....ations
windows11-21h2-x64
1Xeno-v1.0...._1.zip
windows11-21h2-x64
1Xeno-v1.0...._1.zip
windows11-21h2-x64
1Xeno-v1.0....UI.exe
windows11-21h2-x64
1Xeno-v1.0....x.html
windows11-21h2-x64
6Xeno-v1.0....ain.js
windows11-21h2-x64
3Xeno-v1.0....lua.js
windows11-21h2-x64
3Xeno-v1.0....sh.dll
windows11-21h2-x64
1Xeno-v1.0....td.dll
windows11-21h2-x64
1Analysis
-
max time kernel
145s -
max time network
156s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
07-11-2024 18:32
Static task
static1
Behavioral task
behavioral1
Sample
Xeno-v1.0.8-x64.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.fingerprint
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.55/LICENSE
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.55/Ruleset Data
Resource
win11-20241023-en
Behavioral task
behavioral6
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Filtering Rules
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Filtering Rules-AA
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/LICENSE
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-DE
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-ES
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-FR
Resource
win11-20241007-en
Behavioral task
behavioral12
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-IT
Resource
win11-20241023-en
Behavioral task
behavioral13
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-NL
Resource
win11-20241007-en
Behavioral task
behavioral14
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-RU
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/Part-ZH
Resource
win11-20241007-en
Behavioral task
behavioral16
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js
Resource
win11-20241007-en
Behavioral task
behavioral17
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/manifest.fingerprint
Resource
win11-20241007-en
Behavioral task
behavioral18
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/manifest.json
Resource
win11-20241007-en
Behavioral task
behavioral19
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/LICENSE
Resource
win11-20241007-en
Behavioral task
behavioral20
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/_metadata/verified_contents.json
Resource
win11-20241007-en
Behavioral task
behavioral21
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/keys.json
Resource
win11-20241007-en
Behavioral task
behavioral22
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.fingerprint
Resource
win11-20241007-en
Behavioral task
behavioral23
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.json
Resource
win11-20241007-en
Behavioral task
behavioral24
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/Variations
Resource
win11-20241023-en
Behavioral task
behavioral25
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/component_crx_cache/alpjnmnfbgfkmmpcfpejmmoebdndedno_1.zip
Resource
win11-20241007-en
Behavioral task
behavioral26
Sample
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/component_crx_cache/eeobbhfgfagbclfofmgbdfoicabjdbkn_1.zip
Resource
win11-20241007-en
Behavioral task
behavioral27
Sample
Xeno-v1.0.8-x64/XenoUI.exe
Resource
win11-20241007-en
Behavioral task
behavioral28
Sample
Xeno-v1.0.8-x64/bin/Monaco/index.html
Resource
win11-20241007-en
Behavioral task
behavioral29
Sample
Xeno-v1.0.8-x64/bin/Monaco/vs/base/worker/workerMain.js
Resource
win11-20241007-en
Behavioral task
behavioral30
Sample
Xeno-v1.0.8-x64/bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win11-20241007-en
Behavioral task
behavioral31
Sample
Xeno-v1.0.8-x64/xxhash.dll
Resource
win11-20241007-en
Behavioral task
behavioral32
Sample
Xeno-v1.0.8-x64/zstd.dll
Resource
win11-20241007-en
General
-
Target
Xeno-v1.0.8-x64/Xeno.exe.WebView2/EBWebView/component_crx_cache/eeobbhfgfagbclfofmgbdfoicabjdbkn_1.zip
-
Size
1KB
-
MD5
e15208ff647aea1698bfa7da5287df5e
-
SHA1
bc5d6e7d0d71ae1bcac13320ee237ce0adc493f3
-
SHA256
8bfd50d350d47445b57bb1d61bbde41ceda7ac43dc81fce95bf1ac646d97d2a0
-
SHA512
07e2435f9e609d92daf97b5c6b75a79c9f8c229facd24999a45d954ad2eda130f7b7deeab6403f8518c5bfe2791b9796952c7ee58023488c90165cb1b0d5f47b
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2792 7zFM.exe Token: 35 2792 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2792 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Xeno-v1.0.8-x64\Xeno.exe.WebView2\EBWebView\component_crx_cache\eeobbhfgfagbclfofmgbdfoicabjdbkn_1.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2792