General

  • Target

    Xeno-v1.0.9-x64-New.zip

  • Size

    7.1MB

  • Sample

    241119-wgbbtatpfk

  • MD5

    b32e1b06f1a530bdfd3c43abde00df1e

  • SHA1

    5f25d1ce95c71963b67708e13739b8e3ebd65d9b

  • SHA256

    d4494d6239ab355a31308234f5c4508c6b31cb2e89e0636101de41bd60d544fb

  • SHA512

    5f249c82222bcf8ce8b3e65720c2aa362c8ab6ff53c4aa5e1193a9f48ad628a7edf18f4756f3091f8b0ba0498dd0ef82fe0fe787c5e31a404679b8bea1171e93

  • SSDEEP

    196608:gCoNYe5eqB3aM//Cwj0lY8MT0iSi1WhLObay4VhF0:1oNY8TB3//CwIlY8MIiSi1WpvvhF0

Score
7/10

Malware Config

Targets

    • Target

      Xeno-v1.0.9-x64-New.zip

    • Size

      7.1MB

    • MD5

      b32e1b06f1a530bdfd3c43abde00df1e

    • SHA1

      5f25d1ce95c71963b67708e13739b8e3ebd65d9b

    • SHA256

      d4494d6239ab355a31308234f5c4508c6b31cb2e89e0636101de41bd60d544fb

    • SHA512

      5f249c82222bcf8ce8b3e65720c2aa362c8ab6ff53c4aa5e1193a9f48ad628a7edf18f4756f3091f8b0ba0498dd0ef82fe0fe787c5e31a404679b8bea1171e93

    • SSDEEP

      196608:gCoNYe5eqB3aM//Cwj0lY8MT0iSi1WhLObay4VhF0:1oNY8TB3//CwIlY8MIiSi1WpvvhF0

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks