General
- Target xenon-client.jar
- Size 514KB
- Sample260624-r4e63acy9z
- SHA256 5f50c669ef140fb9d75a274781d9b3e220cfe8678dc2eee7b79e221224c0f44e
- MD5 450412d2d62504910bdb6d659df38916
- SHA1 d537c4186e486878fbd92fc9c725ea7530be4ed7
- SHA512 cd78cae899a999ef646f77da06dc80bc4d81e34794a88c19f5c0e2805fc16c52c034f91d43e5c1297310a5fd8c4ab610950c7cd8368ad082e9ae708fc652f0c8
- SSDEEP 6144:Rgaiifwf6XYUxi6qUWE57o3AGpCy63ydEnaYYKiB0FZviqCZhzyiF/v5:RBYD8iJUlopdBEnabKHfvibhem
- TLSH T131B4E1EBB9969DCEE50FE43B00818022F964E0DED44DF90F06B6419989A7DD83B15BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
xenon-client.jar
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
xenon-client.jar
Resource
win11ltsc2024-20260618-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target xenon-client.jar
- Size 514KB
- SHA256 5f50c669ef140fb9d75a274781d9b3e220cfe8678dc2eee7b79e221224c0f44e
- MD5 450412d2d62504910bdb6d659df38916
- SHA1 d537c4186e486878fbd92fc9c725ea7530be4ed7
- SHA512 cd78cae899a999ef646f77da06dc80bc4d81e34794a88c19f5c0e2805fc16c52c034f91d43e5c1297310a5fd8c4ab610950c7cd8368ad082e9ae708fc652f0c8
- SSDEEP 6144:Rgaiifwf6XYUxi6qUWE57o3AGpCy63ydEnaYYKiB0FZviqCZhzyiF/v5:RBYD8iJUlopdBEnabKHfvibhem
- TLSH T131B4E1EBB9969DCEE50FE43B00818022F964E0DED44DF90F06B6419989A7DD83B15BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.