Resubmissions

24-01-2025 18:53

250124-xjqd7atrcr 8

24-01-2025 18:37

250124-w9e6gasjcv 8

24-01-2025 18:35

250124-w8hvzatlbm 3

24-01-2025 18:21

250124-wzj2ns1nbs 7

24-01-2025 18:11

250124-wsl8fs1kex 8

24-01-2025 18:05

250124-wpbmjsslgl 7

24-01-2025 17:27

250124-v1e9fa1kbr 8

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2025 18:53

General

  • Target

    Xeno-v1.1.35-x64/api-ms-win-crt-math-l1-1-0.dll

  • Size

    20KB

  • MD5

    e10e077bb06209aedd0d0d378c758f73

  • SHA1

    97a9053a311280678f8ef65dc4e25975c41bd4ee

  • SHA256

    8a7bff1c918539a75c25568db25933d653c003e016fd7791a37186b42bbb7c20

  • SHA512

    571c1fc4192320bd967b603e6cda917a62f4720eb4dcd557ec2913d2558c0cfe68f936198f5809934aaa3a1d6049e8e918eb0e638a7244df5c71ef0c78843191

  • SSDEEP

    384:rJI2M4Oe59Ckb1hgmLZWphW1D1IDBRJJo95DKlxT1xpN:ri2Mq59Bb1jEkI1PU5Dmv

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.35-x64\api-ms-win-crt-math-l1-1-0.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:848
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 848 -s 80
      2⤵
        PID:1668

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads