Analysis
-
max time kernel
150s -
max time network
160s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-de -
resource tags
-
submitted
09/03/2025, 13:32
General
-
Target
Release/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cu.hyb
-
Size
51KB
-
MD5
b4e5921b1df85ba9f2ebe6ce578915f6
-
SHA1
b5f2e813667aae32e65cab9c9a0dd291421ada0b
-
SHA256
2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
-
SHA512
41696a9e25ca004acdc8def265766392ce3568747560ff73cd08ac9fa4a99e4c4654fb84dc602845b3e444a8312fb099c72932471f7e830874cd7cfa184b63b7
-
SSDEEP
1536:a5OMYzUXoeoZA7SmEUbxucj5DTKZ2oVXEyb:a5JYzUXoeCA7SmEU9ucjBKZxJEyb
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Release\workspace\Xeno.exe.WebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-cu.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx