General
- Target Xeno-v1.3.40.exe
- Size 84.1MB
- Sample260508-jlnfqaet71
- SHA256 133fbff6b605118dc6b4060d2e30c9f905ec73453d7553a510d9c8ff54355d8f
- MD5 94084060cbf709439f7be5fa41a3437b
- SHA1 90892ef950b39b10084d02c3aafa2e7a66c86e01
- SHA512 7653f0e5a514f364421d0c0d2a0c835f78caf1ab0e265c23fd610be16d61915bce8c5c965f345c208936b4ebd2d5f4076154495049375ddfb1f2ac54cab4d28c
- SSDEEP 786432:X9VAa3/Mdr+mUTwQULuN/cG+YI4npaAaw4zgbT4I3UPKAhLFBSjlkWU7tL6vy8zD:XzMdrBUEZu8Y6wigwI3St4lkdevfv
- TLSH T1BA1833C555DB86E7D114CB3BC491B4B490287D6F8B9E64009CBEBFAE5836F8A4443E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xeno-v1.3.40.exe
Resource
win10v2004-20250619-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xeno-v1.3.40.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Xeno-v1.3.40.exe
- Size 84.1MB
- SHA256 133fbff6b605118dc6b4060d2e30c9f905ec73453d7553a510d9c8ff54355d8f
- MD5 94084060cbf709439f7be5fa41a3437b
- SHA1 90892ef950b39b10084d02c3aafa2e7a66c86e01
- SHA512 7653f0e5a514f364421d0c0d2a0c835f78caf1ab0e265c23fd610be16d61915bce8c5c965f345c208936b4ebd2d5f4076154495049375ddfb1f2ac54cab4d28c
- SSDEEP 786432:X9VAa3/Mdr+mUTwQULuN/cG+YI4npaAaw4zgbT4I3UPKAhLFBSjlkWU7tL6vy8zD:XzMdrBUEZu8Y6wigwI3St4lkdevfv
- TLSH T1BA1833C555DB86E7D114CB3BC491B4B490287D6F8B9E64009CBEBFAE5836F8A4443E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10