Overview

overview

10

Static

static

10

Xeno Executor.zip

windows11-21h2-x64

1

Xeno Execu...me.txt

windows11-21h2-x64

3

Xeno Execu...pi.dll

windows11-21h2-x64

1

Xeno Execu...er.exe

windows11-21h2-x64

7

discord_to...er.pyc

windows11-21h2-x64

3

get_cookies.pyc

windows11-21h2-x64

3

misc.pyc

windows11-21h2-x64

3

passwords_grabber.pyc

windows11-21h2-x64

3

source_prepared.pyc

windows11-21h2-x64

3

Xeno Execu...ts.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xeno Executor.zip

  • Size

    29.3MB

  • Sample

    250130-wnvzss1jcr

  • MD5

    866ddc12befe739461f7b315cd214540

  • SHA1

    b7150481f8722b194eca856b4ebd5cbb58691cb8

  • SHA256

    95fbcbb21cec048d41b9062fcb2ae610c6ebe722487493b3a6e3c201af15b846

  • SHA512

    416876fd1a6ce518674d43ae406abac4aca4413bbf7d03a5a7befeec19209f1bd02f8c5cea27f9c5673b604845b0f7adad6e59f17ba39481b947c0c8e065a500

  • SSDEEP

    786432:ewEd15sJk+YaFj1CGDehdNQV6lfpkbp80silfpih0Z:C15cZYarTDehna6lfS5Ria

Score
10/10
pysilonpyinstallerupx

Malware Config

Targets

    • Target

      Xeno Executor.zip

    • Size

      29.3MB

    • MD5

      866ddc12befe739461f7b315cd214540

    • SHA1

      b7150481f8722b194eca856b4ebd5cbb58691cb8

    • SHA256

      95fbcbb21cec048d41b9062fcb2ae610c6ebe722487493b3a6e3c201af15b846

    • SHA512

      416876fd1a6ce518674d43ae406abac4aca4413bbf7d03a5a7befeec19209f1bd02f8c5cea27f9c5673b604845b0f7adad6e59f17ba39481b947c0c8e065a500

    • SSDEEP

      786432:ewEd15sJk+YaFj1CGDehdNQV6lfpkbp80silfpih0Z:C15cZYarTDehna6lfS5Ria

    Score
    1/10
    behavioral1

    • Target

      Xeno Executor/Readme.txt

    • Size

      149B

    • MD5

      3916464b0efe8649cc0256e35b3149a9

    • SHA1

      f24ee297acdf0b359924d91889a29d0745f5c1d4

    • SHA256

      6ac4d10f5707d048c342288d78a5e47760e53419010b4d2061d4b3f8f1bcb053

    • SHA512

      fd385c50e17e58eb266876413dcb693b572232e09bc878b5169b7f38a16293454624e08173022bc2cad9cbcb32d8a8bc8fee86a108213e1b6cbbd24bbc94d1ba

    Score
    3/10
    behavioral2

    • Target

      Xeno Executor/XenoApi.dll

    • Size

      4.0MB

    • MD5

      4a584584e18ecebf045df988c01c85da

    • SHA1

      a7da3bdd03f9a4cfb81911923dbe8ef2648ec4c2

    • SHA256

      e45e308d76d922d8c22e9fa938778fc3cdeb8aae20a0a9039e746b669ea7ac7b

    • SHA512

      f710259c56aac3e1245347e8b647a25976afc66374e3a37685ee14e5fe30951a0a0582f6ceb8e3e14b4d3480f55ded41d120b8bfa407bd6fdbf539337df3528f

    • SSDEEP

      96:O1NNN21NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNl:3

    Score
    1/10
    behavioral3

    • Target

      Xeno Executor/XenoInstaller.exe

    • Size

      29.5MB

    • MD5

      f9a56e4e71ff3cf6dcd384d0afb6470e

    • SHA1

      2a9bf8077e08127f6677c92e607f7f685a263d75

    • SHA256

      2692142a8e973830b6866917d2eda6e0440b1ea89049943bc4a7897d980bc554

    • SHA512

      efb9e82bdd37894e465b896cd4aef203a3f660572d165c3ccdd0e1aabd12a40f0a43276bec8bd7245050edc358633c85f18f1070f6472479f3458a5014188dc3

    • SSDEEP

      786432:jow/lhONW88i8m1NxOcl8dPXB6BYeBLpdSYCxeDs5Vd:ZlhsWo8mxBlmPxaYeBl1s5

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral4

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      924ef065a5167d44170ac81a60cc6fbe

    • SHA1

      ebfa171438758dd9810369d3077f618bfab5bc09

    • SHA256

      78a36fae762432c89f4c0b185e5c227144817199dbde90d16749c6bfc0fb1dd1

    • SHA512

      15a2144fe6e0e081856fd875bcbb239a83da115dce2cda1924f71cfc401f13f681d5047cb80b40cdcdcb617c12d9c12f7bfdc15d38177ace8685c59bb631afdc

    • SSDEEP

      192:bIqqTmuEWauge+M6DA8AYv++JDcNQshU8En5W4NXOYd/G7XW:+9avP588A+DDWRm5FOUG7XW

    Score
    3/10
    behavioral5

    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      c9a6c4ec57f83d1aa200fe076665c42c

    • SHA1

      42bf07fb97a2ccd29a67067ae9ead40548e046b9

    • SHA256

      ec0628cca3f23628d1ff24a88e8215238eee1601cfe9e49a4525fdca15034497

    • SHA512

      ffe8ba3ff8edb65ff53b9006fa327991f9c272ace5f7cfb387080d8cd23f994842eee49246f1c32d41d6e081dff1a04f9c6b3e5d5e5e2f3cd96fead21fa09745

    • SSDEEP

      192:srJe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:iQBifedokqYnuHN3gQ

    Score
    3/10
    behavioral6

    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      36ed907d6c57862deacc25f4da2bde11

    • SHA1

      0e21743b8eff2688e13055bfe26467cd3af43559

    • SHA256

      8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087

    • SHA512

      89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4

    • SSDEEP

      96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g

    Score
    3/10
    behavioral7

    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      cc180daa11732953527c69ac7bbea3b1

    • SHA1

      24ea916374f1fe5981219c1c330ba8f851571e9e

    • SHA256

      6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe

    • SHA512

      5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb

    • SSDEEP

      192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER

    Score
    3/10
    behavioral8

    • Target

      source_prepared.pyc

    • Size

      171KB

    • MD5

      09da6c9058261bdfaee8c5990325391e

    • SHA1

      89a00352924e06d764c740db740990cefe29d72e

    • SHA256

      5a6932873012ce5e5c9e7dc5214832f76a4ebc170b290e57a9cb69cf65dfe193

    • SHA512

      a2fa93d5cbb5da8214e607fa8532fe5786eada2109cc0902ed98a208926466355603d173fdb3d72dcdcfe054312f04486ada0eb3f601d0ffd357732085512b4c

    • SSDEEP

      3072:nUawFCpYRSFS2SVfXUc2oH7iD6GxrhQpvqdaPFHtsilDY:WQpaSpS52our6JqdaPPsKY

    Score
    3/10
    behavioral9

    • Target

      Xeno Executor/assets/xenoassets.dll

    • Size

      174KB

    • MD5

      456af46d784916ff78f08748574b6597

    • SHA1

      c39bb97cab97577f6b8ba572ee16870f7a4e3759

    • SHA256

      9f7f1e88805ec3f4f32443f26316c20ae3ae72e9554f7430c1b32019a57799fb

    • SHA512

      dfe948840959f734f85b532a0083307febf833b5cec6c00968de04ad684c985bbabda97e8306ef04028db7f732d5b3cb670fde0badcf638a23ac52b348590213

    • SSDEEP

      96:ONNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNy:P

    Score
    1/10
    behavioral10

MITRE ATT&CK Enterprise v15

Tasks