Analysis
-
max time kernel
147s -
max time network
159s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-de -
resource tags
-
submitted
09/03/2025, 13:32
General
-
Target
Release/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hy.hyb
-
Size
605B
-
MD5
70ea4451c3a26fd7197a3d2188be4152
-
SHA1
e0c1390d94876bf2a3cbdecaabb0e335bd86355d
-
SHA256
9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
-
SHA512
ac957947c51ea23a9b7ca482db08f0ca3332b8048025a96acb01a4486c1a87c3f3d08898e94cc8e0b20721c56ce708fb37e1bd81bee1fedba60a7f370d5ddaa4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Release\workspace\Xeno.exe.WebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-hy.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx