Analysis
-
max time kernel
92s -
max time network
160s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-de -
resource tags
-
submitted
09/03/2025, 13:32
General
-
Target
Release/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hr.hyb
-
Size
2KB
-
MD5
1864e47e724bb7f9c052a2840eee21d9
-
SHA1
9749136107913d6570c0c46ae2b52e66d8284c38
-
SHA256
d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
-
SHA512
2d6e76aed93652510f5864dde1e1923c67e7413e895abfa8fc7e8c9177e228e4d153afb7099b86697d1662ca3124ff2173f4aab2c978d52583a8e2dbc70c0842
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Release\workspace\Xeno.exe.WebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-hr.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx