General

  • Target

    Xeno-v1.1.4-x641.zip

  • Size

    4.9MB

  • MD5

    10d6a09d9e0031ce8446257c6cbe2776

  • SHA1

    b35d206a3ee429647817f2640577058cd5324a40

  • SHA256

    b4a941d057f1368a7314e07279a3c08691d93a2b0cf9310eb1edff63e9ddf4b8

  • SHA512

    c669324d1577da7d0980953dabd69eb1cbaa68c91f5d19fb903faeb7e8baaf2794d85c2cd9b28b7f09e821efd6292f42434523b28bd26730a870bc747557f53f

  • SSDEEP

    98304:MJ9cxX7dTh6upOa/855+s0HqGR58qsHQOa+Em1RPwlhuzqDeE2Q9wsWl:MXcxRQSNqZijR583M+57PwlIqCkfWl

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1343723753242103868/09fTd57-J6ekLWzm8Uc27OAXCUKtS7zCT95Y4jS6IqKufxX_46yVhlzvdh3or-nI8svk

Signatures

  • Skuld family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.1.4-x641.zip
    .zip
  • Xeno-v1.1.4-x64/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    27a311b1330c0aee48d1ddba70a324fa


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.4-x64/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • Xeno-v1.1.4-x64/XenoUI.deps.json
  • Xeno-v1.1.4-x64/XenoUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Xeno-v1.1.4-x64/XenoUI.runtimeconfig.json
  • Xeno-v1.1.4-x64/scripts/Dex.lua
  • Xeno-v1.1.4-x64/scripts/Infinite Yield.lua
  • Xeno-v1.1.4-x64/scripts/Sine Wave.lua
  • Xeno-v1.1.4-x64/scripts/Spinning Donut.lua
  • Xeno-v1.1.4-x64/scripts/UNCCheckEnv.lua
    .js