General
- Target a8692e96e689820e7714bf0ae529f49682ce5a002dc221fa10d4b32ce4629d38
- Size 170KB
- Sample260210-cdg6eaas5c
- SHA256 a8692e96e689820e7714bf0ae529f49682ce5a002dc221fa10d4b32ce4629d38
- MD5 140ffcc3a1162ad8c384b7e7542a5be7
- SHA1 032a5e3c17a36120893103f93073a80770ee7acb
- SHA512 ab4ae2b5fdb8a7ae04b94bca34ca228c650ef4c555424219c49786054189acdfacb86ae13696991c86df5654564b4f4eb5fc3a271c65125c3f7569b52a3eab49
- SSDEEP 3072:4rvPYVgjJ/gjBP79m1tJm2z98F+0SCXwvf4aW:svTjJ/oP5O2U0SCAo
- TLSH T11D044A83B2D618FCE427D27496ABA333F4B1F8155338A96F0B54CB351E59E20B129F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
a8692e96e689820e7714bf0ae529f49682ce5a002dc221fa10d4b32ce4629d38.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a8692e96e689820e7714bf0ae529f49682ce5a002dc221fa10d4b32ce4629d38.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
xillen_stealer
C2
-
https://goldenring.live
Targets
-
- Target a8692e96e689820e7714bf0ae529f49682ce5a002dc221fa10d4b32ce4629d38
- Size 170KB
- SHA256 a8692e96e689820e7714bf0ae529f49682ce5a002dc221fa10d4b32ce4629d38
- MD5 140ffcc3a1162ad8c384b7e7542a5be7
- SHA1 032a5e3c17a36120893103f93073a80770ee7acb
- SHA512 ab4ae2b5fdb8a7ae04b94bca34ca228c650ef4c555424219c49786054189acdfacb86ae13696991c86df5654564b4f4eb5fc3a271c65125c3f7569b52a3eab49
- SSDEEP 3072:4rvPYVgjJ/gjBP79m1tJm2z98F+0SCXwvf4aW:svTjJ/oP5O2U0SCAo
- TLSH T11D044A83B2D618FCE427D27496ABA333F4B1F8155338A96F0B54CB351E59E20B129F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Xillen_stealer family
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.