General

  • Target
    Xeno-v1.3.55.zip
  • Size 6.8MB
  • Sample260620-t27veahs51
  • SHA256 7d89aca3584916e86707d8c9c6af606491bc9a3cadff9aea85a95f97a7a02a0b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Xeno-v1.3.55/Xeno.exe
    • Size 160KB
    • SHA256 098e0ddda1fa6cec7def5be97f6cd85df891324b5ccd52e001cf415e09ee557b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Target
      Xeno-v1.3.55/XenoUI.dll
    • Size 145KB
    • SHA256 d12e9318898f2aff7494fe89a2a8d3e55b2b7cf45ff74e66e152f4ced2012aab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/msvcp140.dll
    • Size 544KB
    • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/msvcp140_1.dll
    • Size 35KB
    • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/msvcrt.dll
    • Size 683KB
    • SHA256 84425efa675012d33433c4c1c43836811d74be8b3e53a04947566f19356803d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks