2b41f560cf40e7efb69eeb4446e61a24504445b59cd66436788f0e63713bc989

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
30-01-2025 20:34

Target

Xeno-v1.1.50-x64/XenoV1.1.50.exe
Size

5.9MB
MD5

d5814e9ed4d5b64ab6802ebc45e2a781
SHA1

b12bdd7640ee98d8b2b8eb19bce1a5e1cb63deef
SHA256

fe8ecab9919b314990dedb5aeb5d72c92c36f6f51e4de0dad9e44e4e35624035
SHA512

7f9e7f44865cf8167f49605fc4724ec7bee372b2728d77d95f6809120bf85701f654bfab7e714cceeae62619079ad395981a4910d0067e4e0533793fa71d6240
SSDEEP

98304:NM+nh2Nji65sn6Wfz7pnxCjJaWlpx1dstaNoSwKHf1c3z5MOueAeFV9h/kr6lVbw:N3nCDOYjJlpZstQoS9Hf12VKXib/CmVC

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
1028	XenoV1.1.50.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral5/files/0x000500000001962d-21.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 588 wrote to memory of 1028	588	XenoV1.1.50.exe	31
PID 588 wrote to memory of 1028	588	XenoV1.1.50.exe	31
PID 588 wrote to memory of 1028	588	XenoV1.1.50.exe	31

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.50-x64\XenoV1.1.50.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.50-x64\XenoV1.1.50.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:588
- C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.50-x64\XenoV1.1.50.exe
  "C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.50-x64\XenoV1.1.50.exe"
  2⤵
  - Loads dropped DLL
  PID:1028

C:\Users\Admin\AppData\Local\Temp\_MEI5882\python310.dll

Filesize
1.4MB

MD5
b93eda8cc111a5bde906505224b717c3

SHA1
5f1ae1ab1a3c4c023ea8138d4b09cbc1cd8e8f9e

SHA256
efa27cd726dbf3bf2448476a993dc0d5ffb0264032bf83a72295ab3fc5bcd983

SHA512
b20195930967b4dc9f60c15d9ceae4d577b00095f07bd93aa4f292b94a2e5601d605659e95d5168c1c2d85dc87a54d27775f8f20ebcacf56904e4aa30f1affba

Download Submit
memory/1028-23-0x000007FEF6230000-0x000007FEF6695000-memory.dmp

Filesize
4.4MB

Download