3f86b2bd5429fe2c91944006fe6657102aa57de90aeaee507c7c173a9f568949 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

XenosOl.bat

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
XenosOl.bat
Size 2KB
Sample260719-v8eb4sav6v
SHA256 3f86b2bd5429fe2c91944006fe6657102aa57de90aeaee507c7c173a9f568949
MD5 c870e74165e10d401a73d7272742078c
SHA1 84ac85ebd3a54450d1e320982d3d4d6d06ed65cc
SHA512 0836b34e39308bd4bc37c418c9db7d37121b94a741184eecf60b0259cedeb70826458227b6684f81f6e208abbe01b749fd030c9a92b0e5df95582d01d7a9e302
TLSH
T117410E827261A482D2D438B0497A158BF21A22A7AB0DCEA97023117D59637C1B7EC7C9
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion execution persistence

Static task

static1

Behavioral task

behavioral1

Sample

XenosOl.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  XenosOl.bat
- Size 2KB
- SHA256 3f86b2bd5429fe2c91944006fe6657102aa57de90aeaee507c7c173a9f568949
- MD5 c870e74165e10d401a73d7272742078c
- SHA1 84ac85ebd3a54450d1e320982d3d4d6d06ed65cc
- SHA512 0836b34e39308bd4bc37c418c9db7d37121b94a741184eecf60b0259cedeb70826458227b6684f81f6e208abbe01b749fd030c9a92b0e5df95582d01d7a9e302
- TLSH
  T117410E827261A482D2D438B0497A158BF21A22A7AB0DCEA97023117D59637C1B7EC7C9
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion execution persistence
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy