Overview

overview

9

Static

static

3

Xenos.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Xenos.exe
  • Size 1.1MB
  • Sample260702-rggrdafx2v
  • SHA256 def1c2f12307d598e42506a55f1a06ed5e652af0d260aac9572469429f10d04d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryevasionpersistenceransomware

Malware Config

Targets

    • Target
      Xenos.exe
    • Size 1.1MB
    • SHA256 def1c2f12307d598e42506a55f1a06ed5e652af0d260aac9572469429f10d04d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasiondiscoveryevasionpersistenceransomware

    • Modifies boot configuration data using bcdedit

      ransomwareevasion

    • Enables test signing to bypass driver trust controls

      Allows any signed driver to load without validation against a trusted certificate authority.

      defense_evasion

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks