69e43fe7ea3817134874b2da967ff6d590b0513e125580179c0410df9cfef39f

Submit
Reports

Overview

overview

Static

static

Xeno-v1.1....re.dll

windows7-x64

Xeno-v1.1....ms.dll

windows7-x64

Xeno-v1.1....pf.dll

windows7-x64

Xeno-v1.1....on.dll

windows7-x64

Xeno-v1.1....no.dll

windows7-x64

Xeno-v1.1....no.exe

windows7-x64

Xeno-v1.1....UI.exe

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....-0.dll

windows7-x64

Xeno-v1.1....x.html

windows7-x64

Xeno-v1.1....ain.js

windows7-x64

Xeno-v1.1....lua.js

windows7-x64

Xeno-v1.1....ain.js

windows7-x64

Xeno-v1.1.....de.js

windows7-x64

Xeno-v1.1.....es.js

windows7-x64

Xeno-v1.1.....fr.js

windows7-x64

Xeno-v1.1.....it.js

windows7-x64

Xeno-v1.1.....ja.js

windows7-x64

Xeno-v1.1....nls.js

windows7-x64

Xeno-v1.1.....ko.js

windows7-x64

Xeno-v1.1.....ru.js

windows7-x64

Xeno-v1.1....-cn.js

windows7-x64

Xeno-v1.1....-tw.js

windows7-x64

Xeno-v1.1....der.js

windows7-x64

Xeno-v1.1....64.dll

windows7-x64

Xeno-v1.1....64.dll

windows7-x64

Resubmissions

24-01-2025 18:53

24-01-2025 18:37

24-01-2025 18:35

24-01-2025 18:21

24-01-2025 18:11

24-01-2025 18:05

24-01-2025 17:27

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
24-01-2025 18:53

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Core.dll

Resource

win7-20240903-en

windows7-x64

27 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xeno-v1.1.35-x64/Microsoft.Web.WebView2.WinForms.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Wpf.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Xeno-v1.1.35-x64/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Xeno-v1.1.35-x64/Xeno.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Xeno-v1.1.35-x64/Xeno.exe

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

Xeno-v1.1.35-x64/XenoUI.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-convert-l1-1-0.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-filesystem-l1-1-0.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-heap-l1-1-0.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-locale-l1-1-0.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-math-l1-1-0.dll

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-runtime-l1-1-0.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-stdio-l1-1-0.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Xeno-v1.1.35-x64/api-ms-win-crt-string-l1-1-0.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Xeno-v1.1.35-x64/bin/Monaco/index.html

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/base/worker/workerMain.js

Resource

win7-20240729-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/basic-languages/lua/lua.js

Resource

win7-20241010-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.js

Resource

win7-20241023-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.de.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.es.js

Resource

win7-20240708-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.it.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.js

Resource

win7-20241010-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js

Resource

win7-20241010-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js

Resource

win7-20240729-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js

Resource

win7-20241023-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Xeno-v1.1.35-x64/bin/Monaco/vs/loader.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Xeno-v1.1.35-x64/libcrypto-3-x64.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Xeno-v1.1.35-x64/libssl-3-x64.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Xeno-v1.1.35-x64/libcrypto-3-x64.dll
Size

5.0MB
MD5

54ca3e6afcb3c57c7914c0856d779f2a
SHA1

e37be8d92350aa1f9dd3212015de959faa58aa2f
SHA256

7aed0bc00d2f0ca0de95eaa6461327bd2e4543723a6ca443a7e899738b353b5a
SHA512

e8079e9d4bfa253677a669913f8198882c2eaaf9251f11cfa64eed5597c34ab7c267bed3826ad9f0a83675177a7575af54081852a5a633d999bd13cf873a79e8
SSDEEP

98304:UlAXTY8BwEVQ1qb0Oev71CPwDvt3uFRnCLF:UlAXTY8BFVQ1qAOi1CPwDvt3uFRnCLF

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1680 wrote to memory of 1836	1680	rundll32.exe	30
PID 1680 wrote to memory of 1836	1680	rundll32.exe	30
PID 1680 wrote to memory of 1836	1680	rundll32.exe	30

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.35-x64\libcrypto-3-x64.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1680
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1680 -s 88
  2⤵
  PID:1836

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads