4ac21f2fa903f70a8193e3cc477336cfe0f2b2f1c04c45b1a073d8ce35d4ec8a | Triage™

Login
Reports

Overview

overview

3

Static

static

1

XenoExecut...mat.py

windows10-2004-x64

3

XenoExecut...mat.py

windows11-21h2-x64

3

XenoExecut...ted.js

windows10-2004-x64

3

XenoExecut...ted.js

windows11-21h2-x64

3

XenoExecut...sh.vbs

windows10-2004-x64

1

XenoExecut...sh.vbs

windows11-21h2-x64

1

XenoExecut...ent.js

windows10-2004-x64

3

XenoExecut...ent.js

windows11-21h2-x64

3

XenoExecut...ipt.js

windows10-2004-x64

3

XenoExecut...ipt.js

windows11-21h2-x64

3

XenoExecut...un.bat

windows10-2004-x64

1

XenoExecut...un.bat

windows11-21h2-x64

1

XenoExecut...ser.js

windows10-2004-x64

3

XenoExecut...ser.js

windows11-21h2-x64

3

XenoExecut...ver.js

windows10-2004-x64

3

XenoExecut...ver.js

windows11-21h2-x64

3

XenoExecut...ker.js

windows10-2004-x64

3

XenoExecut...ker.js

windows11-21h2-x64

3

XenoExecut...aml.js

windows10-2004-x64

3

XenoExecut...aml.js

windows11-21h2-x64

3

XenoExecut...aml.js

windows10-2004-x64

3

XenoExecut...aml.js

windows11-21h2-x64

3

XenoExecut...aml.js

windows10-2004-x64

3

XenoExecut...aml.js

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
XenoExecutor-xeno.zip
Size 632KB
Sample260426-pegx9act4m
SHA256 4ac21f2fa903f70a8193e3cc477336cfe0f2b2f1c04c45b1a073d8ce35d4ec8a
MD5 e67ea9e0be565dc6ae675b2b37ff8f19
SHA1 b204cd22fd2520097b04b31057b9ea4a0fd306a2
SHA512 1cc61f717f986551a029882870a601122b8f434dfa3a3520983a1602abbadc8331d6656bbdc2c24244b6ae3b740227186c2e1d21a9a7d58815d340e45763d2f2
SSDEEP 12288:EHp16NnGINGh3dgzP+QjlJr9bzZ+k2w/9VCdB034Y3EvUvCicRXAWe:8UiJd+HjlCwlC03v3Eva1c1M
TLSH
T14FD41221DDC97B89C59254F6DD02114BDE16DF85C686AA23B3ACF4319C1D3AC9B283CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

XenoExecutor-xeno/Xeno/format.py

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

XenoExecutor-xeno/Xeno/format.py

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

XenoExecutor-xeno/Xeno/formatted.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

XenoExecutor-xeno/Xeno/formatted.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

XenoExecutor-xeno/Xeno/include/Luau/DenseHash.vbs

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XenoExecutor-xeno/Xeno/include/Luau/DenseHash.vbs

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XenoExecutor-xeno/Xeno/include/client.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

XenoExecutor-xeno/Xeno/include/client.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

XenoExecutor-xeno/Xeno/patch_script.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

XenoExecutor-xeno/Xeno/patch_script.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

XenoExecutor-xeno/Xeno/run.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XenoExecutor-xeno/Xeno/run.bat

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

XenoExecutor-xeno/Xeno/src/Luau/Parser.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

XenoExecutor-xeno/Xeno/src/Luau/Parser.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

XenoExecutor-xeno/Xeno/src/server.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

XenoExecutor-xeno/Xeno/src/server.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

XenoExecutor-xeno/Xeno/src/worker.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

XenoExecutor-xeno/Xeno/src/worker.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

XenoExecutor-xeno/XenoUI/ClientsWindow.xaml.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

XenoExecutor-xeno/XenoUI/ClientsWindow.xaml.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

XenoExecutor-xeno/XenoUI/MainWindow.xaml.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

XenoExecutor-xeno/XenoUI/MainWindow.xaml.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

XenoExecutor-xeno/XenoUI/ScriptsWindow.xaml.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

XenoExecutor-xeno/XenoUI/ScriptsWindow.xaml.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  XenoExecutor-xeno/Xeno/format.py
- Size 808B
- SHA256 76e9ef348db6f1b8a14e70a73505fcd0d1156d7f9a83ada2a650a32b1e8cda84
- MD5 9d70d455b769751cf4a78525f2820575
- SHA1 8766bad3fa77cb242890fa3d32cc410930ac2ab6
- SHA512 e83111e6eb81ace3db7db85bc538acd0df91f91d7cc918347d160f3f47f34d054906b668944218783a6fa51083275a2d627523ae51ceb376e43782554b9e2f56
- TLSH
  T1BF019C344D1E36498762D1EC864BF013271CFC4BC0006214BB8C95DD5FD4B25DAD6B8D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  XenoExecutor-xeno/Xeno/formatted.txt
- Size 757B
- SHA256 36ce8104a9bc260ce11416af6214159377ff1ddb303aeb871d1708c826b04155
- MD5 53ca6acf4d57cc8cb37696b35c916652
- SHA1 a950d4040396a30205a49ebb8a76f278cdceb991
- SHA512 d01304243f80c24112a41b13d0a502bf0dc6e48dcc6bd7e458e304821038e188f54ade9becdcfce6440d257b1c58f71a7ca8f516dbfc5fdbee7faf3cd49b0724
- TLSH
  T1550168E7B1F708896A224CE4CCCE31DCB5A2618B0A5CE8B7D0E78011DE07B9C44E1709
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  XenoExecutor-xeno/Xeno/include/Luau/DenseHash.h
- Size 15KB
- SHA256 3caaa84c26fad72259fbbf8a234dd36eaf9ba71d4e4b5143dfd9cf85277ae95e
- MD5 aef80995d4c884a9919bdef6391459f0
- SHA1 3e993ba5bc6eda4ac4bffc30e120165ef4c74e0f
- SHA512 f4bd4ccdab8bee3c976b2d013648daebe860ee7c05bd3ef2e595ceefe85e2e0cbac1181528d2a2206768dced4b00ec66d697ae8c05b6b2ea0bd60f884fe085b3
- SSDEEP 384:0naZ/3aC2VY/4OPDJKbP/IwPgGCKiYN4Ab6:PL2VIPDJiPUHYm
- TLSH
  T16B620D8520E376009367F2F497D78411F955A043B24DCD987A8E4160EFA30B8EBBD7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XenoExecutor-xeno/Xeno/include/client.lua
- Size 70KB
- SHA256 5bdc1d1f3a87f3626b01f62faf1cb547d451c558164beb925603279597e964b9
- MD5 124becb4aa0e1b1ebe590e21c82f9995
- SHA1 694857a7f727860428ca31e8ebd43c8b7feb064c
- SHA512 7ed7032a9ac6cdac0efc1d4be88a30879b7c4dea8b327e8189e38fe34842415905d81015b8c269d487e6f8efaee4198c76b1597cdd4a6324b898a14931585227
- SSDEEP 1536:A51o5+bMJxLdPaXIWDXpJsKhgQs8sBRGpGad4/oHUZbM:A3E+AJxLdvWDXpeKhgQ
- TLSH
  T19963A79EAD8A24915B46F2F4CC2F580AF9BDF962111E50B0E4FC51E454E883FC0EBD69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  XenoExecutor-xeno/Xeno/patch_script.lua
- Size 733B
- SHA256 e606269278dec863a1ee7d91a741776b649a20e67aeb8b71529dea60441c25ab
- MD5 b862f15715b43236222690424adae265
- SHA1 8bce8c04226495361f9ed60cc4320c5e8e34f814
- SHA512 2b25082720181f8b18a84e8eff132de721ea8cebb40e638143f808ff9917acb159601a1830e092d574358c9940cd2fe0ad96094b1df8c529d1821e3b343588d3
- TLSH
  T18E0147F370F7498D6A128CE1CCCF31C8B992C1480A5DC867C0E761225E7BB8C54E1E09
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  XenoExecutor-xeno/Xeno/run.bat
- Size 33B
- SHA256 4f9f822b2113981989391a9b5fb79d4f33cb7d082c434e19097486a852380f10
- MD5 83ffaf2b10b80d7e8ff740d8088fc57f
- SHA1 0d6e4d0e9e0d6e462d046c091a976100f18da5e2
- SHA512 50126cca130cc9b258c8654999d7ad93707ced2e2a47d07f3147515c93c5c18f83e3bf89be4dd9a1e1bed2b4f0a766fc57e5d6d4fa980c2d3bd1ce81169e9ec7
- MD5 SHA1 SHA512
Score

1^/10
behavioral11 behavioral12
- Target
  XenoExecutor-xeno/Xeno/src/Luau/Parser.cpp
- Size 106KB
- SHA256 6f01d13433071cad36e975a07e646ced9b9c242a200ccfd027dcfccb969d6ddb
- MD5 5476e544b281ca9f489a5a12f587909a
- SHA1 12fc66da6c8039c338825fc6b89866630405eeda
- SHA512 75777955cb03ab1b4038eac7b36db53551336df76464b93f2e175228907424639184dc1dd83440c4e50d35e3156fec954155a58d4a5b0b9af10b37a0f9404725
- SSDEEP 3072:duarmhxnXltmVgeOPqHRH+Ubu51dkaHOBcC9i1NiYEFbD+M5e8dvteieVoV+Tuy:duarmbXlt5yDj5XdC
- TLSH
  T134B3559A34A10132D6E7627FCF5F9919B237504B710CCA90B80E51E02F8596D9BB3BF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  XenoExecutor-xeno/Xeno/src/server.cpp
- Size 25KB
- SHA256 6fbd993aa4abae9567b0c46350d8be842abe482e0f0d8f08722f2c758d7784e5
- MD5 6a11d3806e007639502feea11b073bc6
- SHA1 d945608bf4942bc41006b4e4183a27ddfb23392f
- SHA512 b3382985c8d76a3a215ade04fc3bc212d20956cf38ee62cccb7570d84b113cc8525e669fe00f7ddc1a02216ac6779ed7b749aef5ae22d420fbab6fbafc9e8e80
- SSDEEP 384:X914mMEPR7zSdW+L0gbynBQc+vhOUOb3d9fW1Sc:X914hIcd4jnB1+pGN9fLc
- TLSH
  T153C2FFC4B7EFAD930BC164658D55D0862CBCA877E79ADE52DC4A08CC80D856FC6BC9B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  XenoExecutor-xeno/Xeno/src/worker.cpp
- Size 24KB
- SHA256 3007fc5fb9fa03354ba45b41bfaabb4df480b32d5b02f6941dc678e1e813401d
- MD5 4f684a038d1d17b7fe5c94a9fb106d4c
- SHA1 dd760e83563935e6d4f33edb0b58312b43e41097
- SHA512 d4796cd9b08af769676e7bebc4cf998e60a201bd565d9fbe608e44e37f19473af30424bf7acdcf9d244f3b0c4badda259cf9a84ff45b04870a37f977136bb19f
- SSDEEP 768:r9a9e5Rdcc7ErmI3IpLaOlLkP7B4bdgU72:r9acRf7ErULaOlLkTB4bdgU72
- TLSH
  T106B2B39914BF78552523117AA7ABC01979568003A328CBE0FD5FC3DC5F88078EEF96E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  XenoExecutor-xeno/XenoUI/ClientsWindow.xaml.cs
- Size 4KB
- SHA256 e63de4ff0dfc30e28f41d7300e0b46e1d1338f797c631a7dfd782b7e730fb8ec
- MD5 56ea2c99e604fcf8a7043fa21e4085db
- SHA1 11bffa79de088c690af81f43670d226cf2f22a51
- SHA512 f5049d90b681a42fbd2843c4a1a8aa8d2809fa06348236454f1a65f75c3ee09c6729df98c257deeb7b6e4f19e1752a6569da0f326e2654289620f2c6e408d006
- SSDEEP 96:JMKWigoBNe+hfnNpKHfRx+cBSkopnaaOznovO57QY3WhmU:1NeIfnNpUfRxXBSzpnaLovWzTU
- TLSH
  T1E4A15F04BB8CA67D09641399D668E6D97B7E123837033C73ED8C809C99D868D837EB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  XenoExecutor-xeno/XenoUI/MainWindow.xaml.cs
- Size 6KB
- SHA256 3061647b2f6358d497e43c8c41933caa2ebf63ff153511aaca14408bb3a072aa
- MD5 855bb072afa67c660d8c9d09c5df343f
- SHA1 aed9ef3fe6e92c804fda94d16e41976fdc480b2a
- SHA512 2170b0e56e3b502dd3aa31952930c0e48bf4e8f7120d62b93b4dfa6ba5934220952d5c8dd1723c6500525bb8b0873902942b9b679390ff1646c9029aa40cd374
- SSDEEP 96:JPKVWMwR3ccfMkxL0daE9uyeQAhS3RljQ4HOlqKhd74lMH5SK/u9/stmfZo9y7tq:7Mm0datyLRBljQ4HO0Kh9r+9EtmD7tze
- TLSH
  T19DD132568F5DE6B506E52069D776B6D6093D403E936068B3ED8D108EF4C410A8FBCBE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  XenoExecutor-xeno/XenoUI/ScriptsWindow.xaml.cs
- Size 3KB
- SHA256 7ed4fcd950d8c167a7afef263bf6cbfcd9ac74452b72fea6e88f01792471914b
- MD5 9a905bcd52006143f31be69bb4b458ba
- SHA1 48d1d28e8d271b59faa42a1ad0445620233d84e9
- SHA512 97a0373ecc659181b580dfdd213c81eaa38fff027990769ed682fbd447be3e2202ef076b9305c7b10d4755944b5ba6931266749cf1deab5eaeacd1a6f6c21093
- TLSH
  T136616649AFFCE3B5855D209F9935DA8A4D3D413D160898B77F8EC000ECE455A0BE86E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy