69e43fe7ea3817134874b2da967ff6d590b0513e125580179c0410df9cfef39f

Resubmissions

24-01-2025 18:53

24-01-2025 18:37

24-01-2025 18:35

24-01-2025 18:21

24-01-2025 18:11

24-01-2025 18:05

24-01-2025 17:27

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
24-01-2025 18:53

Target

Xeno-v1.1.35-x64/XenoUI.exe
Size

95KB
MD5

38246fb0d91772bb188b74956fcac653
SHA1

5b513501576bfd408c002bc7e3937222bd5880da
SHA256

5467a08450f3330e5aecfcac90b7e2f6005b7031b2e900c6080e894ff435223a
SHA512

66c2db8045386a2e3cf43cd56c9fc72d34108a4092fec0ef83c4817a6e2484ddde4d3366228532cbe60bff02d6e28b6c7354c749db955de236396dc29116251a
SSDEEP

1536:htOb8p1vRzSfcuafx2WR42zxMVY6dTPrvWa5riimh3VuM/APHV5y6SlSW8lXR:hEbfWytdTPrvWAPuw7Pby6S+lXR

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2160 wrote to memory of 1164	2160	XenoUI.exe	30
PID 2160 wrote to memory of 1164	2160	XenoUI.exe	30
PID 2160 wrote to memory of 1164	2160	XenoUI.exe	30

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.35-x64\XenoUI.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.35-x64\XenoUI.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2160
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2160 -s 500
  2⤵
  PID:1164

memory/2160-0-0x000007FEF5B23000-0x000007FEF5B24000-memory.dmp

Filesize
4KB

Download
memory/2160-1-0x000000013F430000-0x000000013F44C000-memory.dmp

Filesize
112KB

Download