General

  • Target

    Xeno-v1.0.9-x64-New.zip

  • Size

    7.1MB

  • MD5

    b32e1b06f1a530bdfd3c43abde00df1e

  • SHA1

    5f25d1ce95c71963b67708e13739b8e3ebd65d9b

  • SHA256

    d4494d6239ab355a31308234f5c4508c6b31cb2e89e0636101de41bd60d544fb

  • SHA512

    5f249c82222bcf8ce8b3e65720c2aa362c8ab6ff53c4aa5e1193a9f48ad628a7edf18f4756f3091f8b0ba0498dd0ef82fe0fe787c5e31a404679b8bea1171e93

  • SSDEEP

    196608:gCoNYe5eqB3aM//Cwj0lY8MT0iSi1WhLObay4VhF0:1oNY8TB3//CwIlY8MIiSi1WpvvhF0

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.0.9-x64-New.zip
    .zip
  • Xeno-v1.0.9-x64-New/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64-New/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64-New/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64-New/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64-New/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    12a9ce968f1a98b80da3deb780350fa5


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64-New/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Xeno-v1.0.9-x64-New/Xeno.exp
  • Xeno-v1.0.9-x64-New/Xeno.lib
  • Xeno-v1.0.9-x64-New/Xeno.pdb
  • Xeno-v1.0.9-x64-New/XenoUI.deps.json
  • Xeno-v1.0.9-x64-New/XenoUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Xeno-v1.0.9-x64-New/XenoUI.pdb
  • Xeno-v1.0.9-x64-New/XenoUI.runtimeconfig.json
  • Xeno-v1.0.9-x64-New/bin/Monaco/index.html
    .html .js polyglot
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/basic-languages/lua/lua.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.css
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.js
    .js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Xeno-v1.0.9-x64-New/bin/Monaco/vs/loader.js
    .js
  • Xeno-v1.0.9-x64-New/bin/Tabs/config.json
  • Xeno-v1.0.9-x64-New/bin/Tabs/fe0c0071-4c7c-4271-989e-b59e012c4a0d
  • Xeno-v1.0.9-x64-New/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64-New/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64-New/runtimes/win-arm64/native/WebView2Loader.dll
  • Xeno-v1.0.9-x64-New/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64-New/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64-New/scripts/Dex.lua
    .js
  • Xeno-v1.0.9-x64-New/scripts/Infinite Yield.lua
    .js
  • Xeno-v1.0.9-x64-New/scripts/Sine Wave.lua
  • Xeno-v1.0.9-x64-New/scripts/Spinning Donut.lua
  • Xeno-v1.0.9-x64-New/scripts/UNCCheckEnv.lua
    .js
  • Xeno-v1.0.9-x64-New/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.0.9-x64-New/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections