Resubmissions

20/02/2025, 23:44

250220-3rgd5syjdj 6

20/02/2025, 01:27

250220-bvgqjatkgx 6

11/02/2025, 13:10

250211-qeg4pasmfz 8

09/02/2025, 18:24

250209-w11e2syndl 8

08/02/2025, 15:46

250208-s73l7stjex 8

07/02/2025, 16:24

250207-twhckazmgj 6

29/01/2025, 23:50

250129-3vwcga1qgp 6

General

  • Target

    Xeno-v1.1.4-x64.zip

  • Size

    4.5MB

  • MD5

    b9cdb732b1e4ec5afebb7915616984df

  • SHA1

    6de685f29e3c665aa863a40a85c2742f4c748b23

  • SHA256

    bf58f9a6d18ab45df57f517cef3c338628122be7663252f37c72add00de0619f

  • SHA512

    0cb9b5a4b570237c03cef81f3669344b13785ff973a234ab1d65c2f259cb650b03ddea1884d8679b72fbb79b916f6acf481eb059746c5cf1ae0341b3c4c82865

  • SSDEEP

    98304:R+D6OMydrm+twdjTmDh/BRFQNM74slPrDtgosRhh8jtXGFdJgx:sDUyF9tWjTml/3bZrpnbjtWFdJgx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.1.4-x64.zip
    .zip
  • Xeno-v1.1.4-x64/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.4-x64/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.4-x64/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.4-x64/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.4-x64/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    27a311b1330c0aee48d1ddba70a324fa


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Xeno-v1.1.4-x64/XenoUI.deps.json
  • Xeno-v1.1.4-x64/XenoUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Xeno-v1.1.4-x64/XenoUI.runtimeconfig.json
  • Xeno-v1.1.4-x64/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.4-x64/bin/Monaco/index.html
    .html .js polyglot
  • Xeno-v1.1.4-x64/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/basic-languages/lua/lua.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.css
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.js
    .js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Xeno-v1.1.4-x64/bin/Monaco/vs/loader.js
    .js
  • Xeno-v1.1.4-x64/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    945163dff22f51600d06a0b23fe994e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    a68e19b72bf615dc5689a862e51c72dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    8fe8ee8466472be6c8207404ee8d1c05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/runtimes/win-arm64/native/WebView2Loader.dll
  • Xeno-v1.1.4-x64/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/scripts/Dex.lua
  • Xeno-v1.1.4-x64/scripts/Infinite Yield.lua
  • Xeno-v1.1.4-x64/scripts/Sine Wave.lua
  • Xeno-v1.1.4-x64/scripts/Spinning Donut.lua
  • Xeno-v1.1.4-x64/scripts/UNCCheckEnv.lua
    .js
  • Xeno-v1.1.4-x64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f91c705cf579114968b3edc12e1175e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections