General

  • Target
    Xeno-v1.3.0a.zip
  • Size 16.9MB
  • Sample260709-vtk64sev3p
  • SHA256 bd9c42ed72178ddf940abc4458776d079bf2b3eb5f5c94b037670d9a31185d58
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: blankgrabber

    Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.

  • A stealer written in Python and packaged with Pyinstaller 2 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Xeno-v1.3.0a.zip
    .zip 16.9MB
  • Xeno-v1.3.0a/Microsoft.Web.WebView2.Core.dll
    .dll 557KB
  • Xeno-v1.3.0a/Microsoft.Web.WebView2.WinForms.dll
    .dll 37KB
  • Xeno-v1.3.0a/Microsoft.Web.WebView2.Wpf.dll
    .dll 50KB
  • Xeno-v1.3.0a/Newtonsoft.Json.dll
    .dll 695KB
  • Xeno-v1.3.0a/ReadMe.txt
    624B
  • Xeno-v1.3.0a/WebView2Loader.dll
    .dll 161KB
  • Xeno-v1.3.0a/Xeno.dll
    .dll 2.0MB
  • Xeno-v1.3.0a/Xeno.lib
    2KB
  • Xeno-v1.3.0a/XenoExecutor.exe
    .exe 10.8MB
  • ����.(.pyc
    1KB
  • Xeno-v1.3.0a/XenoUI.deps.json
    2KB
  • Xeno-v1.3.0a/XenoUI.dll
    .exe 140KB
  • Xeno-v1.3.0a/XenoUI.pdb
    44KB
  • Xeno-v1.3.0a/XenoUI.runtimeconfig.json
    429B
  • Xeno-v1.3.0a/api-ms-win-crt-convert-l1-1-0.dll
    .dll 15KB
  • Xeno-v1.3.0a/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 13KB
  • Xeno-v1.3.0a/api-ms-win-crt-heap-l1-1-0.dll
    .dll 12KB
  • Xeno-v1.3.0a/api-ms-win-crt-locale-l1-1-0.dll
    .dll 11KB
  • Xeno-v1.3.0a/api-ms-win-crt-math-l1-1-0.dll
    .dll 20KB
  • Xeno-v1.3.0a/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 16KB
  • Xeno-v1.3.0a/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 17KB
  • Xeno-v1.3.0a/api-ms-win-crt-string-l1-1-0.dll
    .dll 18KB
  • Xeno-v1.3.0a/concrt140.dll
    .dll 316KB
  • Xeno-v1.3.0a/editor/index.html
    .html .js 164KB
  • Xeno-v1.3.0a/editor/vs/base/worker/workerMain.js
    .js 133KB
  • Xeno-v1.3.0a/editor/vs/basic-languages/lua/lua.js
    4KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.css
    294KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.js
    .js 2.1MB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.de.js
    46KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.es.js
    46KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.fr.js
    49KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.it.js
    48KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.ja.js
    52KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.js
    38KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.ko.js
    46KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.ru.js
    75KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.zh-cn.js
    36KB
  • Xeno-v1.3.0a/editor/vs/editor/editor.main.nls.zh-tw.js
    36KB
  • Xeno-v1.3.0a/editor/vs/loader.js
    .js 29KB
  • Xeno-v1.3.0a/libcrypto-3-x64.dll
    .dll 7.1MB
  • Xeno-v1.3.0a/libssl-3-x64.dll
    .dll 1.4MB
  • Xeno-v1.3.0a/msvcp140.dll
    .dll 544KB
  • Xeno-v1.3.0a/msvcp140_1.dll
    .dll 35KB
  • Xeno-v1.3.0a/msvcrt.dll
    .dll 683KB
  • Xeno-v1.3.0a/ucrtbase.dll
    .dll 1011KB
  • Xeno-v1.3.0a/vcruntime140.dll
    .dll 121KB
  • Xeno-v1.3.0a/vcruntime140_1.dll
    .dll 48KB

Xeno-v1.3.0a.zip

  • SHA256 bd9c42ed72178ddf940abc4458776d079bf2b3eb5f5c94b037670d9a31185d58
  • MD5 SHA1 SHA512 SSDEEP TLSH