8e1b34915cb69055dea022d9152a81ff568c97eb853cea612dac3a968dfc1833 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Xenes/Xenes.exe

windows10-2004-x64

6

Xenes/Xenes.exe

windows11-21h2-x64

6

f_00002f.html

windows10-2004-x64

4

f_00002f.html

windows11-21h2-x64

7

Xenes/Xene...re.dll

windows10-2004-x64

1

Xenes/Xene...re.dll

windows11-21h2-x64

1

Xenes/Xene...pet.js

windows10-2004-x64

3

Xenes/Xene...pet.js

windows11-21h2-x64

3

adblock_snippet.js

windows10-2004-x64

3

adblock_snippet.js

windows11-21h2-x64

3

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....re.dll

windows11-21h2-x64

1

Xenes/runt...er.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Xenes (1).zip
Size 26.0MB
Sample260508-22358abs2j
SHA256 8e1b34915cb69055dea022d9152a81ff568c97eb853cea612dac3a968dfc1833
MD5 eec5894ee874218bf5bedddef89d511e
SHA1 f4bb9076f73afeb7a4757904631df9442fddf88e
SHA512 2c9f44db08d8d3a6095cf20a98feb8f18446596f7b7422c26c45caefddaa8ee74d34a0b09edb0d42c81e34ec7248b008d4a0d3f051801ec81ea4a2f71c2358c8
SSDEEP 786432:pBSW/leF7YblgqmPMLZCGmMMmfNCHaUnHQb2FkY:XZ/lnblg8goMmwH5E0kY
TLSH
T1ED573342720F6D51F9CA6BFD59B052CBFBBA7257A8F4952230156290CD4F9D2BAC0B0C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Xenes/Xenes.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

10 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

Xenes/Xenes.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral3

Sample

f_00002f.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

f_00002f.html

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

Xenes/Xenes.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Xenes/Xenes.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Xenes/Xenes.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.84/adblock_snippet.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Xenes/Xenes.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.84/adblock_snippet.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

adblock_snippet.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

adblock_snippet.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Microsoft.CognitiveServices.Speech.core.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Microsoft.CognitiveServices.Speech.core.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Xenes/runtimes/win-x64/native/WebView2Loader.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  Xenes/Xenes.exe
- Size 1.7MB
- SHA256 e5b87323b6d6ebe0967a8f290f20cb0ce2c90b26ecbc0f0564b6f483b2974fff
- MD5 e29ace702dd1afd6745f991a8060506d
- SHA1 862e6af13ea08a24fcd541d294337b22cb2627a9
- SHA512 b614f91231f48125c48002dad30e4625d1ebfaf6d3c202fb1577351fd98a64f14fef087b83f993f1066b3749d1e5e02621a38404a921e45648fd16af809b52c1
- SSDEEP 24576:0bA1+50SHgbuO0MjdM8yfAPnqOTmciow1Pm7rnlTxYcxMNWwA:0sglH20MjmfeqOTmcNwdm7zbBxM
- TLSH
  T17C85F1A117DC968BCC563F3076B09411066A3CBF14A2899B9855BD8E3D33E70EE5CB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  f_00002f
- Size 122KB
- SHA256 3405f81cb7d41b73c1e207b450ef564736ab483b990410ec689e1f2f07ea3276
- MD5 45b4d398db194ebfda3f2d96dd3ce59b
- SHA1 be7bde50b9c1e5cfdd89088f3dbbcc9729afd5ef
- SHA512 185448770f29324727855c663ec433b5f38b538e7629839055cb387114fd2833ce3c3784e69d76091d9eb30e2a92f69807688ae7638c6577ab8ff8dcc2f292bc
- SSDEEP 1536:uiWej2NR5c4ZB4Y/I4QANsH2TEyFmaBIqr9VoJxaFf5l:WNR5c4ZB4Y/I4QANsoFmaBpr9Vpf5l
- TLSH
  T1A5C3832A6AB3003659575D796BFB9F0A3721A003D505CA183EAC47C44FB2AE4DDB37D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4
- Target
  Xenes/Xenes.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
- Size 2.6MB
- SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
- MD5 0ee2b50c85a110689352fccfa77b5b18
- SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
- SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
- SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
- TLSH
  T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Xenes/Xenes.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.84/adblock_snippet.js
- Size 2KB
- SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
- MD5 f5c93c471485f4b9ab45260518c30267
- SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
- SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
- TLSH
  T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  adblock_snippet.js
- Size 2KB
- SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
- MD5 f5c93c471485f4b9ab45260518c30267
- SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
- SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
- TLSH
  T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Microsoft.CognitiveServices.Speech.core.dll
- Size 2.6MB
- SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
- MD5 0ee2b50c85a110689352fccfa77b5b18
- SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
- SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
- SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
- TLSH
  T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Xenes/runtimes/win-x64/native/WebView2Loader.dll
- Size 155KB
- SHA256 1ac87267e52ccdf5621678697f948030307a650ca56f38f69e74c7cfaf9605c6
- MD5 9235a2ae9fbb00d0fe57b0f107eeafa0
- SHA1 d99d568ea4c1182da7de0160965e812bed049a40
- SHA512 0773609ef3bc844a1dea0bbeecbb08ef61cb76d50313b4e9a205c526f7ee551b188fb8d8acf08350bef9620707d7b988e7f57bb6009aee0db0615cbd44d283d1
- SSDEEP 3072:k7+r33Gx3Xe/uy0A4BBnkDC49KMNU9eATmuEtJjvv8WD+a:kwnGV4p4BnkDCEKtEtJwm
- TLSH
  T17BF35C57B3E9006BE07BC278C5A34A55E772B8115B509AEF03A4477A1F237D0AE3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

© 2018-2026

Terms | Privacy