9e594c1c0c1f5baea5592101ddb000024b08a10fd8cc5059f1eada37ce55c173

Target
Xeno-v1.1.95-f0fd7726.zip
Size 15.0MB
Sample250527-tb1cmswp17
SHA256 9e594c1c0c1f5baea5592101ddb000024b08a10fd8cc5059f1eada37ce55c173
MD5 a36df1807bc8b56a1a002b67c657997e
SHA1 755f9f57d2b73961259d10ba2a5b7846e09622a3
SHA512 d734adfdd888e9086ffaa4818078ddb58dea47e94973b26e5e3def907eac1daffb0ec6dec9f76d3f44290e3533c1b23b4cd79cc5f25a64a90628446b53eeca52
SSDEEP 393216:k4IdYa/geBRJ1CPwDvt3uF9C6CTMruSyAFN:WjA
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Targets

- Target
  Xeno-v1.1.95/Xeno.dll
- Size 1.7MB
- SHA256 7086f6bc1989b0e6cc63c5b0093038dfd6dcef5a798be6c3a84680c157c44969
- MD5 093643697f4669212c25f885e5e19f34
- SHA1 9eb340444d129048e32c62d647fea44c2c18f573
- SHA512 277f9269ce621c9de666b3815a8b1018f10c3d9e1ff6cf68941e97e419cfd4210e0815640e10bcc2c575945569f72fa5b921e77100b248ec642feba8bd1301f7
- SSDEEP 24576:37VGQpkJtRVZI07QNlVhsH97GBtX9AFozZBi7ryWeOIqKS7x34wJg+IQXK3:37HkJtRVZIEQHXyFwiqWerqKHgIQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Xeno-v1.1.95/Xeno.exe
- Size 140KB
- SHA256 0bf71e29af6d20267d1314c33cb78577d1f89be155ff6b45cacb085e44c5b0bf
- MD5 c41f903645119ae792d59b00bd81e13e
- SHA1 0199aa2fb643d249b8abf592b130bc0eabb2d940
- SHA512 07bdee57983e3bffb700b89e2e74826115f86c76cf3f9a3b78fbbb09bb13b01f75cd9cd42c6d377d635024e7cd782f1028f0ad30f2830393f14ccad8cb143899
- SSDEEP 3072:L454jE83DwHBoi2r7Z9V58lmpCnclxuZmPfBZuk:L454jECi2rd9V58Mp/xuZmXB
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Legitimate hosting services abused for malware hosting/C2
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3 behavioral4
- Target
  Xeno-v1.1.95/XenoUI.dll
- Size 93KB
- SHA256 a650f2b79a50c4d3e0de42271cc2969b223fe3f506c7d68200556f072171730d
- MD5 dbac5f93a59dc2dbf0d5bedd14cc9414
- SHA1 e0756e39cfa484194e44b41f11d0533b63abb08d
- SHA512 b1f3bc0d0e3d0f1a188efcc42bfacb08706dc453298fcfd08ace8fe420621aa6cf073f7e5a4194ebb69b70726ecf528f529c16fc1711b26f170bf25e6011f5d6
- SSDEEP 1536:am/35ZUcHHOzT8xMc3hWNbhRuM/APHV5y6SlSO8wjp:Z/JtuzT8xMYom7Pby6Siwjp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Legitimate hosting services abused for malware hosting/C2

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6