7ed4fcd950d8c167a7afef263bf6cbfcd9ac74452b72fea6e88f01792471914b

Resubmissions

26/04/2026, 16:09

260426-tl8rrsew4j3

26/04/2026, 16:08

260426-tk987saw313

Analysis

max time kernel
898s
max time network
489s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XenoExecutor-xeno/XenoUI/ScriptsWindow.xaml.js
Size 3KB
Sample260426-tk987saw31
SHA256 7ed4fcd950d8c167a7afef263bf6cbfcd9ac74452b72fea6e88f01792471914b
MD5 9a905bcd52006143f31be69bb4b458ba
SHA1 48d1d28e8d271b59faa42a1ad0445620233d84e9
SHA512 97a0373ecc659181b580dfdd213c81eaa38fff027990769ed682fbd447be3e2202ef076b9305c7b10d4755944b5ba6931266749cf1deab5eaeacd1a6f6c21093
TLSH
T136616649AFFCE3B5855D209F9935DA8A4D3D413D160898B77F8EC000ECE455A0BE86E6
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\XenoExecutor-xeno\XenoUI\ScriptsWindow.xaml.js
1⤵
PID:4320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4320-0-0x000001AF145D0000-0x000001AF1467F000-memory.dmp

Download

memory/4320-1-0x000001AF12960000-0x000001AF1296C000-memory.dmp