a74393536f56cd9e082533230be32650f1955feae62a8de7872a221bee4d39a6 | Triage

Analysis

max time kernel
93s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/01/2025, 04:12

Sharing

Report Analysis Logs

General

Target

Xeno-v1.1.0-x64.zip
Size

8.0MB
MD5

26b22a3137c34470c05b2d15c118c995
SHA1

28f0bdd871275eb8eaa7c9bfcf12a1b677859a76
SHA256

a74393536f56cd9e082533230be32650f1955feae62a8de7872a221bee4d39a6
SHA512

f0b9ac5d4782cf5d11b48214c1ca386ca4b42bbe63224b2310731ea3fea8dfae113ac22e534ff2a8bddbc21213b5a2ceb0a8fcb8ccc0d09ee3fca90aa0c6bdf5
SSDEEP

196608:bdKh5Wj28NXphL4h19E96HaptVsxhZ0agPL+6:bdr2KpC9E96CtV4uagT+6

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3788	7zFM.exe
Token: 35	3788	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3788	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.0-x64.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads