General
- Target Xeno-v1.3.50.exe
- Size 84.2MB
- Sample260602-ryjmasfx9x
- SHA256 5589b23d452f8007f5ef3810f55a56ab0f29f9261057278a604902eaf22e4d64
- MD5 f5a0c6e39c43a90f08914d50cc6d3148
- SHA1 49583a0177252cd3b7eb179b53ebf05d6645c684
- SHA512 b247a8dd1ad3e152e09314efe79f2d141c4badc0da83ed00cb19b86b48728754a83875b68d12c9c2b300143904cc3607fa5c6dff66f1da8bde1df768fe7a4369
- SSDEEP 1572864:kz0R/jgTvEPe1Z2x6LuOlki8pY8dmbnkMPyONXrD0ysH5QCDHH/XyZz:kzAjgTv5j2YLuNCNHyKXt05QqHfyZz
- TLSH T1C21833BF1D04578DDE02C2F5CA1C70D48474AE73E7E6956C786835BA3D7BCCA2A0261A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Xeno-v1.3.50.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Xeno-v1.3.50.exe
- Size 84.2MB
- SHA256 5589b23d452f8007f5ef3810f55a56ab0f29f9261057278a604902eaf22e4d64
- MD5 f5a0c6e39c43a90f08914d50cc6d3148
- SHA1 49583a0177252cd3b7eb179b53ebf05d6645c684
- SHA512 b247a8dd1ad3e152e09314efe79f2d141c4badc0da83ed00cb19b86b48728754a83875b68d12c9c2b300143904cc3607fa5c6dff66f1da8bde1df768fe7a4369
- SSDEEP 1572864:kz0R/jgTvEPe1Z2x6LuOlki8pY8dmbnkMPyONXrD0ysH5QCDHH/XyZz:kzAjgTv5j2YLuNCNHyKXt05QqHfyZz
- TLSH T1C21833BF1D04578DDE02C2F5CA1C70D48474AE73E7E6956C786835BA3D7BCCA2A0261A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.