bf58f9a6d18ab45df57f517cef3c338628122be7663252f37c72add00de0619f

Resubmissions

20/02/2025, 23:44

20/02/2025, 01:27

11/02/2025, 13:10

09/02/2025, 18:24

08/02/2025, 15:46

07/02/2025, 16:24

29/01/2025, 23:50

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
20/02/2025, 23:44

Target

Xeno-v1.1.4-x64/XenoUI.exe
Size

95KB
MD5

a820e5f0298f087a8f7f1aced8b953d6
SHA1

d9e25cdb909b663305fad31d5bb5d8e6ee2e4d1b
SHA256

91a7ad538e10ff9131424a8b44292315d21dc42b0179ac29c550d61f81a6ff3d
SHA512

81e8ebb90dfcd3f8046a68a1fc2bfb21c31ac306a5bb1be2f84e735260f7a07b4fe1e453a3a512c4f0d99b10cb2c508895fc1e43463e38f3a0974b4548514c74
SSDEEP

1536:SSRxCnk7JSfUuafNmWR42zxMVY6dTPr1Wa5iiZhZuM/APHV5y6SlSW8/XR:1REWytdTPr1WAb87Pby6S+/XR

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 2388	2652	XenoUI.exe	30
PID 2652 wrote to memory of 2388	2652	XenoUI.exe	30
PID 2652 wrote to memory of 2388	2652	XenoUI.exe	30

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.4-x64\XenoUI.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.4-x64\XenoUI.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2652 -s 500
  2⤵
  PID:2388

memory/2652-0-0x000007FEF55E3000-0x000007FEF55E4000-memory.dmp

Filesize
4KB

Download
memory/2652-1-0x000000013F590000-0x000000013F5AC000-memory.dmp

Filesize
112KB

Download