General
- Target Xeno Free.exe
- Size 627KB
- Sample260701-c15j8aew7y
- SHA256 56a53e0e7d30d20e0165588c632eb51c6a46c262ea1e7344240db08fdb229070
- MD5 91e914e6994aeac043c32e7d6917f42c
- SHA1 638520b6b67e15620456d47cbfdf70591feede9f
- SHA512 b03bae65447eca3a9c3ad2bbd684235bc05d6647221d13c1ccb53a1e947e68be7090cadc0c6310e8a538ffc92f55acc2ca398905c0ba8b60cbd618c1bceddea5
- SSDEEP 12288:GdT+CrywDdo0BR4RB1BiTn9lIPdhyC6YLK2eooF:iSCpDdbubiTn9lIPdh+YW2Q
- TLSH T1CED49E40F2E488B4D17B613899B6EB1BEB367858173096CF73E444582FE77E08AB5712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xeno Free.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xeno Free.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Xeno Free.exe
- Size 627KB
- SHA256 56a53e0e7d30d20e0165588c632eb51c6a46c262ea1e7344240db08fdb229070
- MD5 91e914e6994aeac043c32e7d6917f42c
- SHA1 638520b6b67e15620456d47cbfdf70591feede9f
- SHA512 b03bae65447eca3a9c3ad2bbd684235bc05d6647221d13c1ccb53a1e947e68be7090cadc0c6310e8a538ffc92f55acc2ca398905c0ba8b60cbd618c1bceddea5
- SSDEEP 12288:GdT+CrywDdo0BR4RB1BiTn9lIPdhyC6YLK2eooF:iSCpDdbubiTn9lIPdh+YW2Q
- TLSH T1CED49E40F2E488B4D17B613899B6EB1BEB367858173096CF73E444582FE77E08AB5712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory