Overview

overview

8

Static

static

3

Xeno-v1.1....re.dll

windows7-x64

8

Xeno-v1.1....ms.dll

windows7-x64

1

Xeno-v1.1....pf.dll

windows7-x64

1

Xeno-v1.1....on.dll

windows7-x64

1

Xeno-v1.1....no.dll

windows7-x64

1

Xeno-v1.1....no.exe

windows7-x64

3

Xeno-v1.1....UI.exe

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....-0.dll

windows7-x64

1

Xeno-v1.1....x.html

windows7-x64

6

Xeno-v1.1....ain.js

windows7-x64

3

Xeno-v1.1....lua.js

windows7-x64

3

Xeno-v1.1....ain.js

windows7-x64

3

Xeno-v1.1.....de.js

windows7-x64

3

Xeno-v1.1.....es.js

windows7-x64

3

Xeno-v1.1.....fr.js

windows7-x64

3

Xeno-v1.1.....it.js

windows7-x64

3

Xeno-v1.1.....ja.js

windows7-x64

3

Xeno-v1.1....nls.js

windows7-x64

3

Xeno-v1.1.....ko.js

windows7-x64

3

Xeno-v1.1.....ru.js

windows7-x64

3

Xeno-v1.1....-cn.js

windows7-x64

3

Xeno-v1.1....-tw.js

windows7-x64

3

Xeno-v1.1....der.js

windows7-x64

3

Xeno-v1.1....64.dll

windows7-x64

1

Xeno-v1.1....64.dll

windows7-x64

1

Resubmissions

24-01-2025 18:53

250124-xjqd7atrcr 8

24-01-2025 18:37

250124-w9e6gasjcv 8

24-01-2025 18:35

250124-w8hvzatlbm 3

24-01-2025 18:21

250124-wzj2ns1nbs 7

24-01-2025 18:11

250124-wsl8fs1kex 8

24-01-2025 18:05

250124-wpbmjsslgl 7

24-01-2025 17:27

250124-v1e9fa1kbr 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xeno-v1.1.35-x64.zip

  • Size

    4.5MB

  • Sample

    250124-xjqd7atrcr

  • MD5

    5f7548663f208cb2fdd2350b916719a4

  • SHA1

    689f5e7275b316892c88438d3bcb1ed2bf643697

  • SHA256

    69e43fe7ea3817134874b2da967ff6d590b0513e125580179c0410df9cfef39f

  • SHA512

    4ea59a095cdb5ddc1aba1a4a46b717799012cafdeca795e84bee6c5f5892300c82e7199d1e3f70503d87f6fa4e8382137d0ffb738776785fc2e71d2037a4b961

  • SSDEEP

    98304:OmD6OMyjrm+twdjTmDh/BRFQNM74slPUDtgoCrEhxGMZLvrylQQOJgq:JDUyP9tWjTml/3bZUpn7GMZbOe7Jgq

Score
8/10
microsoftdefense_evasiondiscoveryexecutionpersistencephishing

Malware Config

Targets

    • Target

      Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Core.dll

    • Size

      557KB

    • MD5

      b037ca44fd19b8eedb6d5b9de3e48469

    • SHA1

      1f328389c62cf673b3de97e1869c139d2543494e

    • SHA256

      11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197

    • SHA512

      fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b

    • SSDEEP

      12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv

    Score
    8/10
    microsoftdefense_evasiondiscoverypersistencephishing

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Detected potential entity reuse from brand MICROSOFT.

      phishingmicrosoft

    • Drops file in System32 directory

    behavioral1

    • Target

      Xeno-v1.1.35-x64/Microsoft.Web.WebView2.WinForms.dll

    • Size

      37KB

    • MD5

      8153423918c8cbf54b44acec01f1d6c2

    • SHA1

      f0c3c5412b809725e6d4809230adb15cc7d83ad2

    • SHA256

      5696366f7458da940cc986dc5d3d4549a2368512acd769014ecbb07b47bd88b4

    • SHA512

      f3dc771e37c71479d332142ec5a9c5c3f39ca71937f595a0f7482ae5aaaafd92e932efc9b0363d4511d547f3c8b2e0497ebbf8356e7d07fc344f4e5715b0ee87

    • SSDEEP

      768:1sjCEEHJ9l0EeFZ2sxIHzttZDgcEST3p4Jjrjh2jJ+SG2au8vxJKia5/Zi/ZGQKk:wCEB15azttZDgcEST3p4JjrjaJ+SG2a/

    Score
    1/10
    behavioral2

    • Target

      Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Wpf.dll

    • Size

      50KB

    • MD5

      4a292c5c2abf1aab91dee8eecafe0ab6

    • SHA1

      369e788108e5fb0608a803fa2e5a06690b4464b5

    • SHA256

      b628d6133bf57b7482a49aa158e45b078df73ee7d33137ac1336d24ac67ed1b4

    • SHA512

      ca22adfff9789730e4c02343e320d80b8466cfc5a15f662cefe376b7ee29dea571004c1c26cd3f50c0d24e646f2b36b53fa86835678f46f335d65eec52431cde

    • SSDEEP

      1536:gpGhWMhWLF9jwKi8LDP/ryEH0GBy4JjrD1aah/UaOzk6hKKa5/Bi/IGCv0Z0T6Cc:taBi8LDP/b0GBy4JjrD1aah/UaOzk6hz

    Score
    1/10
    behavioral3

    • Target

      Xeno-v1.1.35-x64/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      adf3e3eecde20b7c9661e9c47106a14a

    • SHA1

      f3130f7fd4b414b5aec04eb87ed800eb84dd2154

    • SHA256

      22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07

    • SHA512

      6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b

    • SSDEEP

      12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF

    Score
    1/10
    behavioral4

    • Target

      Xeno-v1.1.35-x64/Xeno.dll

    • Size

      1.2MB

    • MD5

      8363219b62cf490fea5571d5b779c174

    • SHA1

      3d259f711d21053b7323a740e8c256ca77c64efd

    • SHA256

      9840c97b35afb77418d541ef2f1b5da93c0d7d9632c334ec7444ceadeb0f9fa8

    • SHA512

      70874a58bbcc263e1c929e479bde31e731cb26cec6a51081f3d33ae37be32b4c9e96a36306d997f12a81e0867bc13a0c32baf14c52b9f1dfab894decf7305a22

    • SSDEEP

      24576:9G0w6ywcoFdPEb8j3+ClaySrLH7+4r3e7540eFMWFFpKc:9G0w6OaZlaxfHy4r3e75w9F

    Score
    1/10
    behavioral5

    • Target

      Xeno-v1.1.35-x64/Xeno.exe

    • Size

      140KB

    • MD5

      f0d6a8ef8299c5f15732a011d90b0be1

    • SHA1

      5d2e6cc0bd4f1e810808f2a284f6c2a30b21edcf

    • SHA256

      326bae0bd1398234dcef4c3d71f00e30cc9b447fa963e21d6f29605f42bb7e5b

    • SHA512

      5b9f1517949a7fa9fdb7413146632d21a4208dc92823b673af85963ae5cc7f827b3ba27f3e9c5554c45e726ad159aac77d30306acc3559bd8712534e41ff0f27

    • SSDEEP

      3072:2hK4Uay3XrQ8habqgp9pC9Z6p5uf3C6k0xuZ04ntfxDhBury:2hK4XycqgpfCup5sVxuZ04bhA

    Score
    3/10
    discovery
    behavioral6

    • Target

      Xeno-v1.1.35-x64/XenoUI.dll

    • Size

      95KB

    • MD5

      38246fb0d91772bb188b74956fcac653

    • SHA1

      5b513501576bfd408c002bc7e3937222bd5880da

    • SHA256

      5467a08450f3330e5aecfcac90b7e2f6005b7031b2e900c6080e894ff435223a

    • SHA512

      66c2db8045386a2e3cf43cd56c9fc72d34108a4092fec0ef83c4817a6e2484ddde4d3366228532cbe60bff02d6e28b6c7354c749db955de236396dc29116251a

    • SSDEEP

      1536:htOb8p1vRzSfcuafx2WR42zxMVY6dTPrvWa5riimh3VuM/APHV5y6SlSW8lXR:hEbfWytdTPrvWAPuw7Pby6S+lXR

    Score
    1/10
    behavioral7

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-convert-l1-1-0.dll

    • Size

      15KB

    • MD5

      c8dbf0ca88facfe87899168a7f7db52c

    • SHA1

      e2cf163ad067b5d3b19908a71ed393711f66cd09

    • SHA256

      94b6e91b93c2202dabd659bff294bee87c22897a30a6b4930b49051c2fb502dc

    • SHA512

      e85c738f5d5a0ae6c3ef75a082712cb3cf2feae4560d316cb110e4eaf3a97d6058d5374da2a5edde39c3114f9aff8a027cbdff8cf49be2425943bac09c39e70b

    • SSDEEP

      192:w89M0wd8dc9cy1WphWWD1S8f4DBQABJt9o0Z5uE7Mqnajcno:wt0wd8xy1WphWWD1IDBRJtO0zuOMlAo

    Score
    1/10
    behavioral8

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-filesystem-l1-1-0.dll

    • Size

      13KB

    • MD5

      42a2a95f1bb940d01f55eb1674a81fe2

    • SHA1

      f982f3bbb4dc3aaaba8df098d1b395846f7cba08

    • SHA256

      51541ec6684b43157a85ea46a42ebed4555be06bed0d0d07ff3ea6377301318d

    • SHA512

      de9a7a1a6a45e2f76105eaeafcc3c29adbff142dcf2586e147417045b897a9dcddec5e1b97acfc5d3fc9c8e3a508dbc3f607bf3df20a7435e74436f94cb056b6

    • SSDEEP

      192:zt/PGnWlC0i5C9WphWAeD1S8f4DBQABJJ2yy2D8KN3qnajV2MVorr:VunWm5C9WphWbD1IDBRJJkt2lxnorr

    Score
    1/10
    behavioral9

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-heap-l1-1-0.dll

    • Size

      12KB

    • MD5

      98da186fd7d7873c164a51c5d7b77f1a

    • SHA1

      725a8b8fdfbe6a1e85674f4b2a7c0dd08411e00b

    • SHA256

      80139e4caa379d87b1d1dafc23ace71d2b330368115f6314140d4ae59c2a78e8

    • SHA512

      587b49a24cc59d4dcb62b59f379d1c9010196a6551cfc99ffdd931eeb0172618f020863191e530d65ad198e57063c57ba6f70bcf80591304243268ea5513f806

    • SSDEEP

      192:DaY17aFBRQWphWp+QD1S8f4DBQABJtAa46ArNc4qnajr7PQW:7VWphWFD1IDBRJtAa54lrPQW

    Score
    1/10
    behavioral10

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-locale-l1-1-0.dll

    • Size

      11KB

    • MD5

      ff48b107b2449a647c64baabd49408a1

    • SHA1

      efb868ba125d9ff08474f02b9483d74c36a13cee

    • SHA256

      7bb8644e565ad4bcfd890f9044bccb4d99953a740e9a500b1f820b2fdc3fc240

    • SHA512

      4da2e4b727e7f31f8bffd680453c451b444bdf217c15cb36e353f8bb5ecb6c6481caa7d848558c7d94cfc2d1bc3551ace11e85ffc8ec7a7b570a59c294ea0216

    • SSDEEP

      192:JWphWzDD1S8f4DBQABJtySO5M8xOSqnaj3yAY9:JWphWHD1IDBRJtyICTluAY9

    Score
    1/10
    behavioral11

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-math-l1-1-0.dll

    • Size

      20KB

    • MD5

      e10e077bb06209aedd0d0d378c758f73

    • SHA1

      97a9053a311280678f8ef65dc4e25975c41bd4ee

    • SHA256

      8a7bff1c918539a75c25568db25933d653c003e016fd7791a37186b42bbb7c20

    • SHA512

      571c1fc4192320bd967b603e6cda917a62f4720eb4dcd557ec2913d2558c0cfe68f936198f5809934aaa3a1d6049e8e918eb0e638a7244df5c71ef0c78843191

    • SSDEEP

      384:rJI2M4Oe59Ckb1hgmLZWphW1D1IDBRJJo95DKlxT1xpN:ri2Mq59Bb1jEkI1PU5Dmv

    Score
    1/10
    behavioral12

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-runtime-l1-1-0.dll

    • Size

      16KB

    • MD5

      f91e1ff896b5616919ac97c7095c513e

    • SHA1

      4ec6eed0bac5a8801db10238c7b3a5d35a87be67

    • SHA256

      07382c0d91dad2bb6ba8bd06ea02f12c57abf7c4e5a70672e9f2954d09a4ffd4

    • SHA512

      6448d6cdfde11e1805b6d381111ea062f681807c9dc54ae890305f287b13b6fb57ef3f4d3b909e56b81c99830c086b5702b46ba0f93e695fce2b87b32fa4b26a

    • SSDEEP

      192:uaajPrpJhhf4AN5/KipWphWAzD1S8f4DBQABJJLQ67T0q11qnajVtPx5g:ulbr7fWphWiD1IDBRJJL7Tplxb5g

    Score
    1/10
    behavioral13

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-stdio-l1-1-0.dll

    • Size

      17KB

    • MD5

      429c26ed27a026442f89c95ff16ce8c2

    • SHA1

      69ed09faae00a980c296546c9b5e6a8d5f978439

    • SHA256

      2a466648affd3d51b944f563bb65046a3da91006a0d90fb2c0b123487a1fc1b3

    • SHA512

      04641164d9e1eb3183db0c406583626011dfe2b2574551c0ac466ebf44165afcd7d8faf356b8268b4fc9a54db20de010a4e4293594ad2e605950aea65636f4e5

    • SSDEEP

      192:BpPLNPjFuWYFxEpah7WphWRD1S8f4DBQABJ+SiLuEbNEdiqnajVCpEbOg4:B19OFVh7WphWRD1IDBRJ5iLbnlxkEf

    Score
    1/10
    behavioral14

    • Target

      Xeno-v1.1.35-x64/api-ms-win-crt-string-l1-1-0.dll

    • Size

      18KB

    • MD5

      0f593e50be4715aa8e1f6eb39434edd5

    • SHA1

      1117709f577278717c34365ce879bcd7c956069b

    • SHA256

      bf4ea10be1b64c442ac0ccf4bdf69f6703467176a27e9e14a488d26448a6e179

    • SHA512

      487dcbf7b7f18d62606cb2f05c8feff07e6ecda42e643f5919c6edda66cdb3b8cc393b0d260374f06c10cf54082410fc9f02bd87cc50866bc0c28b0bcec3e658

    • SSDEEP

      384:fFvU4x0C5yguNvZ5VQgx3SbwA7yMVIkFGl3WphW+D1IDBRJ5YBMOnlxkEx:p5yguNvZ5VQgx3SbwA71IkFxVI1PKJ

    Score
    1/10
    behavioral15

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/index.html

    • Size

      164KB

    • MD5

      001dcbb8f41cdcbf9b4d1e3a0ed4b2d2

    • SHA1

      982a05814546017c40771e59e7677b53d84787e9

    • SHA256

      f1d2c52f2803c29585b81d2eff74c56242d27e9619ee6d38081d5604c5bb1951

    • SHA512

      9a4eba2a9314b6f5851997e1db0ecfae8e40da3443d8a5f9df933ccf6a4d75fc330888c8d14818326e15b3dec9ae2f5f7e73cd08c3822dd7eb0b2d753c8cd8fa

    • SSDEEP

      3072:Nk4J09UmmJv8kBpZaFD48VOAGUWYPjDZlLJbRBiPEP8yKUz2Ojmjr8zM3KP7pblM:64J09BA3pZaFD48VOAGUWYPjdlLJbRBS

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral16

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/base/worker/workerMain.js

    • Size

      133KB

    • MD5

      d0ac5294c58e523cddf25bc6d785fa48

    • SHA1

      1b3661b6db36f1b14fd80dc9a739bfc69c68dfe5

    • SHA256

      e90d1a8f116fa74431117a3ad78dde16dde060a4bf7528dfe3d5a3ad6156504b

    • SHA512

      fea07a1ea5d29a3b4c614248655f4d1ddd94c10c6a6b5c8b428a8b4c0cbec7e7492fa0665c5001e65ce167240ffdfc5ac2c2ed14da3d6f508ae8d8b3c8e8eebb

    • SSDEEP

      3072:bzjH/zYJc5c/7tMLrJ78II4F9N8+em5W+:XjH/zYJc5c/76LrJ78I7BL

    Score
    3/10
    execution
    behavioral17

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/basic-languages/lua/lua.js

    • Size

      4KB

    • MD5

      eebda1fdd970433750c115eae2f03865

    • SHA1

      3f1a1cddb99dead013eac825eb418241656d4bf0

    • SHA256

      ac729efb3164f48d6b08f74d4b15060c126a30d40fb4cd4fc9cc94f2e19bd7c7

    • SHA512

      8b188f3ae73a14a9318dce9761312d9dd2360ab00ee36e83ca6b74288a109c91770954db7537fd84a76707a1e79528fffc97f3a718bcd924545b469a1363c9cb

    • SSDEEP

      96:HDGAW6FJJJkCO8evcIWtdrvrg+1/sLMiWAOKjLobLMzD:BWCDqC20IWtZD92pzOKvomD

    Score
    3/10
    execution
    behavioral18

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.js

    • Size

      2.1MB

    • MD5

      2dc0068cdbc03ce43a75ab0b2df664e2

    • SHA1

      817a209e179466dc8a14e05eb11a6c1b7e3d71eb

    • SHA256

      b604b6148f70fe9db882cce2a7d327b2422ad2f203a805491002a8c564e3c3ff

    • SHA512

      1ce29ed21e027d3552dc05162250bd62d66555f7b9ff48c9c94116d1e696089c32851533e7db30a7507a85b598df8fbf66292904c446536ccd3b2c60209d9d3d

    • SSDEEP

      24576:jFFExk98EXl2uRJxjP3Ddv6QLtQ2MbRpn:Yxk98EXl2ixjP3Ddv6QLtdMf

    Score
    3/10
    execution
    behavioral19

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.de.js

    • Size

      46KB

    • MD5

      d1fd2fb756c73970b9c5e0ba07bff708

    • SHA1

      470057b3244886dccc9f6074297cc8bc2a9c1b39

    • SHA256

      cb1c3416ff242a738c45c3b2590d7d222b159a95a69ce3b7b8d7c8d18ea70828

    • SHA512

      db2432182ff4c85fcca5093d0e433ed9cf5bed3ea3db9ed82fedc87af4d260e0d0f29ff67f0b8ac78e162586a74998ad082a91e8f9a76717827a83d5b2f775cf

    • SSDEEP

      768:ocuLC1xYdRB1a3Xq1GdigBoQqAaI/QQUEYPxFpXT1kF7bJZYmz7lehjDWMQRBk3Z:oclxgVuXq1GdiRQqAaI/QvEYPxFpDkbg

    Score
    3/10
    execution
    behavioral20

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.es.js

    • Size

      46KB

    • MD5

      36f546b28ca17ece9f8eb9bcf8344e13

    • SHA1

      d43934b9041587799e332b2f568aa81666227258

    • SHA256

      327437ee3793e9ae0686c78196b459592c282ed2e86f95ce28d32693b76d7654

    • SHA512

      13f8cc23038c07b6840514db4fc7b503b7a38ae1ec3baab44f1bfbded40ac50ae03c05c754f9678eecd0c8fcefab958152b39b731068b8c2c976c4c57e97f36d

    • SSDEEP

      768:oX8nKFyVgAYwTQG8zHqIkGMvnmvoKA9OfxjB3EVuU13pjbazPn0ANy7+IkLDKPp9:oMKFyVRcdzHqIkGMvnmvoKA9OfxjB3E5

    Score
    3/10
    execution
    behavioral21

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js

    • Size

      49KB

    • MD5

      1a29080733878dd44e0c118e84cd0c39

    • SHA1

      60c158e23962b11918f6cae26445fad5b63bc65a

    • SHA256

      6ed837dc1905c06a20d102921ff06a0bda003c5368ed0576bf7e69494e889ae8

    • SHA512

      5cc68cabb583100320d7c875fd7c46f5c618c3968ac2a7c2b60f90ec74b29349a557049c17d5c851cabb54d5ef26cd65e8d2288d70b62ede06ee1762e25dbd60

    • SSDEEP

      768:op8flgb2uZ5CcXQ6Q3edz3uzATaY3l0y+wj90TWIvkU5BkREPTtOjNjZocYV3A4k:owliv5Ccg67SATaYVKPkRskjNGBAa3k

    Score
    3/10
    execution
    behavioral22

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.it.js

    • Size

      48KB

    • MD5

      18e88f58301ad5ae926204507ab99c6b

    • SHA1

      8eb03235312e88b941f3be212c0efa12b24e6d5f

    • SHA256

      4fe2c4420294758883e134bdf7da9e6c2abf631d3a89c765f32f6c1d0f62653c

    • SHA512

      f66283ec4182e9062f9f03a83acb3f2a49b98fb9ef67e48eaf5227236919ca279831b822fcb3ae252cfeafd81d12fe9c89a2843d91ab140a2b79b6bbc1d4f013

    • SSDEEP

      768:opTEy7izsuMa01VaiYR2L8XoXNj8YtvnYbP4ymMb3d/gyKJdnPTrysribj5K3m05:of7fQ2qd4yq2FA1J1qn4VN7CgL

    Score
    3/10
    execution
    behavioral23

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js

    • Size

      52KB

    • MD5

      3bf851cc70f515cbbe1d39da93e4f041

    • SHA1

      88fe6323bbe14b55b6eec078574318e8474be613

    • SHA256

      1f3556ea7233843b9e08b3c97b6727c533d702563e195c2090a438070dc85f0f

    • SHA512

      61ffe9ec3550d2f8dfbc30d7d61327584833bb714a9d2cfc9788449190089dbdeaa293bb9921a43da782e1c36b7d242e13ac052b46210d2e79793626e921169d

    • SSDEEP

      384:hyd/PwPtm+04LZ+FFHr0ZA9qOSTvvIEveG1vz14NdahWMpA1Uj4vHbX3IPDScLBV:olP4LsIOCaT3lJr/Tvk6892vU1ssD

    Score
    3/10
    execution
    behavioral24

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.js

    • Size

      38KB

    • MD5

      e871d4d9539c26d7d2bf32801ebdecf0

    • SHA1

      711460f619ef09fa23d272d97bfc00593a5319a8

    • SHA256

      5ff0084e6a7eee82a735616239aaf2190ea9d90e89e19340831f3d590828016a

    • SHA512

      b6b9bf96c132db9dfc99d70320231630fc46a8a83f500d8e4f677e2d03206364f2666946f69061dcba2e759f005261dae1ece73e054aa56b8210551bc353cced

    • SSDEEP

      384:hy38McmvQkKEQq4xlX7lrp1E1bIJUeYB4jV87XfVGT3H6Sq6Q4wCJjoce1u6I7JS:o38M7fQq4xPj7+lJcYYKqkGSVetbesy

    Score
    3/10
    execution
    behavioral25

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js

    • Size

      46KB

    • MD5

      60fcd422ac97a1b645ff48cb6928f7af

    • SHA1

      da5b57dfbd257720155e303f0e75e263f0e74190

    • SHA256

      98e649fa40d8e2ccfdc212341feb8165a7d7bbec31e8a77d9819ad9474e4b8ba

    • SHA512

      52439f47f1e12ccf37db40f9fa8fa4966579cd6b327cde1768187cd7fdc7ebdd444e1953e29ed09bdced40d764c2e8f7131d44908c00bfd350e856a9df661aa4

    • SSDEEP

      768:oNOnmkUxK1pLkKgljQM1r0xXDj8kE6q2XlGZrAPPvzcDzr5u1QrWp4cX6go:o4ZUxKgKzxzrE63GZrAPPkrmQKp4cX6L

    Score
    3/10
    execution
    behavioral26

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js

    • Size

      75KB

    • MD5

      6e7d5b984917b00f131c47473ce2b866

    • SHA1

      97f94134ff8f73ab48c0635550f2d8054c239c7f

    • SHA256

      1bb069d95a395bf258d1f262814591aa762c4b30529adde32ccbcaa7c7ca508d

    • SHA512

      f2595e7e1812073c50bfa058db3c7918dd8d7a6f0d20a576c68d854a4c61ed74bef3ad5ab23430567065677d737d81c7f17010055a069b9e38b5594d65e882a0

    • SSDEEP

      1536:ox/PFmMhjpIMbBBKOXnPCSHhiaV6can9oA2yG+YQI/Y:QbhjpIcB8OXdHhiXcanGA2yGiI/Y

    Score
    3/10
    execution
    behavioral27

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js

    • Size

      36KB

    • MD5

      05e49314cf801f5d3992b55243690ea7

    • SHA1

      c20fca9f037adf2edec34ccf67a08e56d1d71bbf

    • SHA256

      e9adc8ffca9853ef6e0bd4e955af9f395a570bc7772fc2dac0c0ff241aac864b

    • SHA512

      7d499b41ae9bee2e72b721a49c0d053029624b19af1ede71a4378e14d3f6b407539c18d29422fb8d21681ce7dc160d2f11e80064017f5c8a5f645d6c1a77cc75

    • SSDEEP

      768:oJbVMLHwwytIMTAlthuIjOP4CAz9NlL2/AdszzHsVBI/C4j00llmR+V66U:odPPZ+huIjTszzHs3IXj00llmMV6j

    Score
    3/10
    execution
    behavioral28

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js

    • Size

      36KB

    • MD5

      becbf441d95b0bc1565faf47ce9de373

    • SHA1

      f660a8a29dc9861f7ff7e228622d492f1630b873

    • SHA256

      94a7ff81b8ec3217a46bc5cdebe2c6aee98f73e6e902b7d9cf394836d052bbe5

    • SHA512

      feee8ef6e36984309186b8ff491982efe4f144859c3f48d147b26bd61af6af751e013a951e945f02a2057368b485204734f6dc50cd6fca6294426b7fbdbcaa4f

    • SSDEEP

      768:ozietcy+xQHM2k00fZvOHRUJdFF/JlN+QVtWrn05IxXUeqJ1wrv6Vl900U1LjK1G:o3sxQHM24ZvtdFF/zN+Q2LUeqJ1wrv6y

    Score
    3/10
    execution
    behavioral29

    • Target

      Xeno-v1.1.35-x64/bin/Monaco/vs/loader.js

    • Size

      29KB

    • MD5

      bc15bb48d4d5c60ce7f16819f4d988c4

    • SHA1

      87c7f328aa357d52b68b2cea0a214365a40cdc36

    • SHA256

      5c3cf09973404ba31d760952f267751ef2bb09f315331d13ca432b65ce2c480b

    • SHA512

      b5d7481773cafd01f3d738949a54e49c166c9a8fea3a150f6f0eed7449176d630991e27544a4e7b23fdad29700ae7fbba5de42f97c69874b6f2ad374194a9853

    • SSDEEP

      768:o7J6CgCAqoxgiwYeMX/so92s8hHlDmc0yvrCfS5kUN+WV+X7:oV6lC8fwYeFKcV5k

    Score
    3/10
    execution
    behavioral30

    • Target

      Xeno-v1.1.35-x64/libcrypto-3-x64.dll

    • Size

      5.0MB

    • MD5

      54ca3e6afcb3c57c7914c0856d779f2a

    • SHA1

      e37be8d92350aa1f9dd3212015de959faa58aa2f

    • SHA256

      7aed0bc00d2f0ca0de95eaa6461327bd2e4543723a6ca443a7e899738b353b5a

    • SHA512

      e8079e9d4bfa253677a669913f8198882c2eaaf9251f11cfa64eed5597c34ab7c267bed3826ad9f0a83675177a7575af54081852a5a633d999bd13cf873a79e8

    • SSDEEP

      98304:UlAXTY8BwEVQ1qb0Oev71CPwDvt3uFRnCLF:UlAXTY8BFVQ1qAOi1CPwDvt3uFRnCLF

    Score
    1/10
    behavioral31

    • Target

      Xeno-v1.1.35-x64/libssl-3-x64.dll

    • Size

      1.3MB

    • MD5

      d66acb55a9f095a24865c9d883f96fd1

    • SHA1

      cc8cb0a1d460fc0ef5a941bc5cd45e29ca7ef527

    • SHA256

      7ae563b23164ec5994dbc24bce536b33df80c40de5ca97d64fe84a5dac34788e

    • SHA512

      35c04c6f5f66d4585bba8fe48f2b470af7d6e366e9b9cb3ce0712818c5b1504c9e492a4d148164adf28793cc55b2ac58d3df28fb00f94033ddcb6e18ecce0227

    • SSDEEP

      12288:9jq84j6NgABFeE4KFq/aXn0ENEoPxV6yatOUH3eKyG8xqU+TMruSoE7y:9m8hCuTrYKpYOK7phTMruSoE7y

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

microsoftdefense_evasiondiscoverypersistencephishing
Score
8/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

discovery
Score
3/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

discovery
Score
6/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10