Analysis
-
max time kernel
89s -
max time network
156s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-de -
resource tags
-
submitted
09/03/2025, 13:32
General
-
Target
Release/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-gu.hyb
-
Size
655B
-
MD5
f6dc4e0fb974869d3d9457c582a38690
-
SHA1
e6708afa342639eb96cb97d1f541a421b2626d00
-
SHA256
af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
-
SHA512
a778236fa8c5f28e747214d0ba0417aca1c9a95e4c013fbc21e6defe39d0421a2b27ccb27e6f248404a9f6b5cd1014574d0478078f36af2a0181872ac8173d72
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Release\workspace\Xeno.exe.WebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-gu.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx