4e671c40d9d780b85f8a44aa50a5c175a9f2c2a0a530e450a981905713ec5378 | Triage

Resubmissions

02/04/2025, 22:36

250402-2h95esxpz5 3

30/03/2025, 19:46

250330-yg7q5avzew 6

29/03/2025, 19:55

250329-ynl31axwgv 6

29/03/2025, 19:55

250329-ym9gxaxvf1 6

29/03/2025, 18:18

250329-wxy3taznv5 6

29/03/2025, 10:24

250329-mfdwwa1xay 7

29/03/2025, 00:19

250329-amltvawpx2 6

Analysis

max time kernel
442s
max time network
444s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
28/03/2025, 22:33

Sharing

Report Analysis Logs

General

Target

Xeno-v1.1.65/Xeno.dll
Size

1.7MB
MD5

4cadca29af3a11865fef4615c1570d67
SHA1

c9df54865d8aa1720e567a1a63d54d6b4cf6eb44
SHA256

86adb40984d8ac950b3dd8057af8015fee5fad009598e529c153f6548e9c57db
SHA512

7761aa9969da57499bb88cef5d137684c4d89e3fe969c5cbaf13229079876ed876dfc83d2f61a8d436b6d66c6a36557e3c6f80e64ce81713967e042cc447cdc9
SSDEEP

24576:gg7i169cc1ndx8TKA1dpJhOtfZOQ5mtLgjHWdTvy7e+JXEv0EmXK3C:99cc1ndx+kgkmtqHyKTEe

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1380	rundll32.exe
1380	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.65\Xeno.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads