Resubmissions
24/01/2025, 18:53
250124-xjqd7atrcr824/01/2025, 18:37
250124-w9e6gasjcv824/01/2025, 18:35
250124-w8hvzatlbm324/01/2025, 18:21
250124-wzj2ns1nbs724/01/2025, 18:11
250124-wsl8fs1kex824/01/2025, 18:05
250124-wpbmjsslgl724/01/2025, 17:27
250124-v1e9fa1kbr8Analysis
- max time kernel
98s - max time network
208s - platform
windows10-ltsc 2021_x64 - resource
win10ltsc2021-20250113-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20250113-enlocale:en-usos:windows10-ltsc 2021-x64system - submitted
24/01/2025, 17:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xeno-v1.1.35-x64.zip
Resource
win10v2004-20241007-en
28 signatures
900 seconds
Behavioral task
behavioral2
Sample
Xeno-v1.1.35-x64.zip
Resource
win10ltsc2021-20250113-en
2 signatures
900 seconds
General
- Target Xeno-v1.1.35-x64.zip
- Size 4.5MB
- Sample250124-v1e9fa1kbr
- SHA256 69e43fe7ea3817134874b2da967ff6d590b0513e125580179c0410df9cfef39f
- MD5 5f7548663f208cb2fdd2350b916719a4
- SHA1 689f5e7275b316892c88438d3bcb1ed2bf643697
- SHA512 4ea59a095cdb5ddc1aba1a4a46b717799012cafdeca795e84bee6c5f5892300c82e7199d1e3f70503d87f6fa4e8382137d0ffb738776785fc2e71d2037a4b961
- SSDEEP 98304:OmD6OMyjrm+twdjTmDh/BRFQNM74slPUDtgoCrEhxGMZLvrylQQOJgq:JDUyP9tWjTml/3bZUpn7GMZbOe7Jgq
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1704 7zFM.exe Token: 35 1704 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1704 7zFM.exe