Analysis
-
max time kernel
95s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19/11/2024, 15:42
Static task
static1
Behavioral task
behavioral1
Sample
Xeno-v1.0.9-x64/Xeno.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Xeno-v1.0.9-x64/Xeno.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Xeno-v1.0.9-x64/XenoUI.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Xeno-v1.0.9-x64/XenoUI.exe
Resource
win10v2004-20241007-en
General
-
Target
Xeno-v1.0.9-x64/Xeno.exe
-
Size
140KB
-
MD5
4a2e503ab9a31880995e60ece8784b13
-
SHA1
5248db95700f5e600c824e736d8d1223f620ddf8
-
SHA256
5a7eb83a45bfb81b23485131a2f80820f3889c69c89257188ec6eb093f375dc9
-
SHA512
908f03a9901aea84df72fa70318aacf773ecd76465f5c9495a89c26e48e7c83c0fadce4fe58e1f7567a3a76f125a9245a18a1b5d5b0d076e15baf3c843a093b5
-
SSDEEP
3072:rjK4UGDHXrQ8hy7qgpHulWD9ZvZ5Pf3Ca10xuZ04ntfOUhBu7q:rjK4TDUqgpqWDLZ5H+xuZ04nhA
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 13 raw.githubusercontent.com 12 raw.githubusercontent.com -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1848 Xeno.exe 1848 Xeno.exe 1848 Xeno.exe 1848 Xeno.exe 1848 Xeno.exe 1848 Xeno.exe