Analysis
- max time kernel
150s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 14:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XylezTweaks.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
XylezTweaks.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target XylezTweaks.exe
- Size 158.2MB
- Sample260712-sbm7msd171
- SHA256 89b1b49e5e6eb2501d7bc44c02dee0c498b7935dcedd13e94834ebe5719887ab
- MD5 6e7854b0322dece4a156197e2dbd1ca7
- SHA1 7848031d4a722c47af932b5069ddc3c1026b5e79
- SHA512 2211c39c97cb76eeb564dfc56f3c4cf2d2b0120e64a46cdb06092796485ae80fc3c6991bc042f26bf11c9797b8a66e6d8d837b9e19d9c3cbf9b3cfa544026e40
- SSDEEP 786432:v2Ve9ptQA8Oa89TsG5YWV5OtsFGtatWbhsCrTG5mfOm5cuA0zm767EPF:uLA838JsHWEd2CvG8fOkZboPF
- TLSH T18F888D11A3E81A45E27B8678D7738261E6B1BC535711C1CF0494FA4A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 2540 XylezTweaks.exe 2540 XylezTweaks.exe 2540 XylezTweaks.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2540 XylezTweaks.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\XylezTweaks\3bVaUhkR7wxn\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\XylezTweaks\3bVaUhkR7wxn\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 67629b6aaee39328d02b11e5d85a53b35aa6cea71d4d37a671295a76c02b240e
- MD5 38f9831155956106c61b9885d6113444
- SHA1 8cbc1aaf60edfd4155bb4f10fdb5257d7c4b84f8
- SHA512 e1e3859d83ee49bfdd0ea5b929772426d529e417c7d6d6bbdf251cc3d5ae5a2eaf055d0be62598231a444a5e54a1b0cea5eb60d4140d5e9739210c3b0d667b18
- SSDEEP 24576:/hNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa5:/xKcdPHmMLYpX7T35/fPoGPpGFjztQcR
- TLSH T1FC453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\XylezTweaks\3bVaUhkR7wxn\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 1c1c5d5ae7530615585b77a8b15588ed51ea66da9a75fceeea7f772970edc01f
- MD5 f344857a45f59103361fd5a5edbdb670
- SHA1 34ce32a1182377e612673add6d2644b9bd723d94
- SHA512 553baf174e8d0b5e8ef4d837a4c16a974b1b52693c3920baa4edc6177a4fc1a05a27923f78d8c3d84f4b7dcfe86b8f50a4ab942045f8afa6087b122b07e64898
- SSDEEP 24576:Dek+C9iX4izlWkFLgcUxwdHaKzhWjl9sIovgbAvJh5A2RwK2Ebie2K9dUghF0+J:4PoKlWkF3CwpaPl1oYbA35A252EbNDxJ
- TLSH T15495494AB6EC40E9C47AD23CDADB461BF63174152761A7CF23A0479D6F27BD00A7A360
- MD5 SHA1 SHA512 SSDEEP TLSH