General
- Target Xeno-v1.3.55.exe
- Size 84.7MB
- Sample260707-ad1lmsdx91
- SHA256 b83de611fb9795fd406bbedd833fbb32b5346937b14a49a6bec43adc3bb6fffe
Malware Config
Targets
-
- Target $PLUGINSDIR/app-64.7z
- Size 84.1MB
- SHA256 3640b7f87fb1ad5b11f90dfbe78a2246f97f9b3fcb34e12afcf1059fbfa2a842
Score1/10 -
- Target LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
Score1/10 -
- Target LICENSES.chromium.html
- Size 7.9MB
- SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
Score4/10 -
- Target chrome_100_percent.pak
- Size 132KB
- SHA256 99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760
Score3/10 -
- Target chrome_200_percent.pak
- Size 191KB
- SHA256 cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4
Score3/10 -
- Target icudtl.dat
- Size 10.1MB
- SHA256 ee3c8883effd90edfb0ff5b758c560cbca25d1598fcb55b80ef67e990dd19d41
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target locales/af.pak
- Size 381KB
- SHA256 7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc
Score3/10 -
- Target locales/am.pak
- Size 619KB
- SHA256 685ecdff01d4ae92be1d900ef00fd8632616bc41f18a56e682528f312d4a5167
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target locales/ar.pak
- Size 680KB
- SHA256 acc1b352ea206c25afe88a614346b468f4f78bf23f886883a38dae905d121dc0
Score3/10 -
- Target locales/bg.pak
- Size 706KB
- SHA256 3fd27d562e32f1a052e924b6c468486acf0b2af42dd1ad2270e83d115d4b3f65
Score3/10 -
- Target locales/bn.pak
- Size 911KB
- SHA256 2bb70dc94361267e755169dde430ea31aa21b4daf31b5eed78901b27bc596a2e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target locales/ca.pak
- Size 430KB
- SHA256 02d60b97f70c31f5c5003108321fc3ac3c79bf39a36392c3adaf7735b9cc1c1d
Score3/10 -
- Target locales/cs.pak
- Size 441KB
- SHA256 c1020222b90558a6a8a07f24756b183594641ef77562d35e7899e1489d0ebd8e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target locales/da.pak
- Size 400KB
- SHA256 dab543bcc1a8abf057f720f9f448e45ca5cfd1c424826bce8933174bb2eccad7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target locales/de.pak
- Size 427KB
- SHA256 6283ec48cddd08c387a36ec71fff87c2ab0ef27449e8971eba2d76a6136b1708
Score3/10 -
- Target locales/el.pak
- Size 775KB
- SHA256 87f0a26d73fea2ebb5017a95e937e08d7c347baecbe93514c1b866c1e28dea32
Score3/10