General

  • Target

    Xeno-v1.0.9-x64.zip

  • Size

    4.4MB

  • MD5

    d5a09d7b68fb0697fdfc609660c0d507

  • SHA1

    59ee0ff14f24c4495aa40ccd0086d23ccea7a7fa

  • SHA256

    bfc0c1c083308a3d5f06d3e21dc76ec1e6702c7f4b27bf2ad3e42b296c8ed72d

  • SHA512

    2a3bc129c53562b391e6d05cab8fae7140c179eddd1ffea335bb65c0eb88e16d528511c73d6b542d8710d5c457cb0a56ed855e821e74cbad0538149897740344

  • SSDEEP

    98304:RpoNYp2GB3aM//vwKCwjToHpAgqnkpYLMofcBO6p:RpoNYpfB3aM//Cwj4HYkucBT

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.0.9-x64.zip
    .zip
  • Xeno-v1.0.9-x64/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    12a9ce968f1a98b80da3deb780350fa5


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64/XenoUI.deps.json
  • Xeno-v1.0.9-x64/XenoUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Xeno-v1.0.9-x64/XenoUI.runtimeconfig.json
  • Xeno-v1.0.9-x64/bin/Monaco/index.html
    .html .js polyglot
  • Xeno-v1.0.9-x64/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/basic-languages/lua/lua.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.css
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.js
    .js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Xeno-v1.0.9-x64/bin/Monaco/vs/loader.js
    .js
  • Xeno-v1.0.9-x64/bin/Tabs/config.json
  • Xeno-v1.0.9-x64/bin/Tabs/fe0c0071-4c7c-4271-989e-b59e012c4a0d
  • Xeno-v1.0.9-x64/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64/runtimes/win-arm64/native/WebView2Loader.dll
  • Xeno-v1.0.9-x64/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64/scripts/Dex.lua
    .js
  • Xeno-v1.0.9-x64/scripts/Infinite Yield.lua
    .js
  • Xeno-v1.0.9-x64/scripts/Sine Wave.lua
  • Xeno-v1.0.9-x64/scripts/Spinning Donut.lua
  • Xeno-v1.0.9-x64/scripts/UNCCheckEnv.lua
    .js
  • Xeno-v1.0.9-x64/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections