2b41f560cf40e7efb69eeb4446e61a24504445b59cd66436788f0e63713bc989

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
30-01-2025 20:34

Target

Xeno-v1.1.50-x64/XenoUI.exe
Size

95KB
MD5

a820e5f0298f087a8f7f1aced8b953d6
SHA1

d9e25cdb909b663305fad31d5bb5d8e6ee2e4d1b
SHA256

91a7ad538e10ff9131424a8b44292315d21dc42b0179ac29c550d61f81a6ff3d
SHA512

81e8ebb90dfcd3f8046a68a1fc2bfb21c31ac306a5bb1be2f84e735260f7a07b4fe1e453a3a512c4f0d99b10cb2c508895fc1e43463e38f3a0974b4548514c74
SSDEEP

1536:SSRxCnk7JSfUuafNmWR42zxMVY6dTPr1Wa5iiZhZuM/APHV5y6SlSW8/XR:1REWytdTPr1WAb87Pby6S+/XR

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 2736	2312	XenoUI.exe	30
PID 2312 wrote to memory of 2736	2312	XenoUI.exe	30
PID 2312 wrote to memory of 2736	2312	XenoUI.exe	30

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.50-x64\XenoUI.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.50-x64\XenoUI.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2312
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2312 -s 500
  2⤵
  PID:2736

memory/2312-0-0x000007FEF5883000-0x000007FEF5884000-memory.dmp

Filesize
4KB

Download
memory/2312-1-0x000000013FCD0000-0x000000013FCEC000-memory.dmp

Filesize
112KB

Download