Overview

overview

8

Static

static

5

Xeno_v1.3.80174.exe

windows11-21h2-x64

5

mpclient.dll

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Xeno_v1.3.80174.zip
  • Size 2.3MB
  • Sample260721-kmvf4abs4j
  • SHA256 6a4ae3edecdd904e00d535c32edd3f8fcfeafb65d7f35d2da1ea7e3c5755ae96
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      Xeno_v1.3.80174.exe
    • Size 683KB
    • SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1
    • Target
      mpclient.dll
    • Size 4.1MB
    • SHA256 29f77ec5a4f2c24af777e960d88337c75f478e11c0fb1a9902207732b2f95685
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral2

MITRE ATT&CK Matrix

Tasks