General

  • Target

    Xeno-v1.1.0-x64.zip

  • Size

    8.0MB

  • MD5

    26b22a3137c34470c05b2d15c118c995

  • SHA1

    28f0bdd871275eb8eaa7c9bfcf12a1b677859a76

  • SHA256

    a74393536f56cd9e082533230be32650f1955feae62a8de7872a221bee4d39a6

  • SHA512

    f0b9ac5d4782cf5d11b48214c1ca386ca4b42bbe63224b2310731ea3fea8dfae113ac22e534ff2a8bddbc21213b5a2ceb0a8fcb8ccc0d09ee3fca90aa0c6bdf5

  • SSDEEP

    196608:bdKh5Wj28NXphL4h19E96HaptVsxhZ0agPL+6:bdr2KpC9E96CtV4uagT+6

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.1.0-x64.zip
    .zip

    Password: xeno

  • Xeno-v1.1.0-x64/Install dependencies.bat
  • Xeno-v1.1.0-x64/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: xeno

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.0-x64/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    Password: xeno

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.0-x64/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    Password: xeno

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.0-x64/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    Password: xeno

    044828317383e7fe51de9c1c840dc2cf


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.0-x64/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    Password: xeno

    72c4e339b7af8ab1ed2eb3821c98713a


    Code Sign

    Headers

    Imports

    Sections

  • m����.pyc
  • Xeno-v1.1.0-x64/XenoUI.deps.json
  • Xeno-v1.1.0-x64/XenoUI.dll
    .exe windows:4 windows x64 arch:x64

    Password: xeno


    Headers

    Sections

  • Xeno-v1.1.0-x64/XenoUI.exe
    .exe windows:6 windows x64 arch:x64

    Password: xeno

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Xeno-v1.1.0-x64/XenoUI.pdb
  • Xeno-v1.1.0-x64/XenoUI.runtimeconfig.json
  • Xeno-v1.1.0-x64/autoexec/test.txt
  • Xeno-v1.1.0-x64/runtimes/win-arm64/native/WebView2Loader.dll
  • Xeno-v1.1.0-x64/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    Password: xeno

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.0-x64/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections