General

  • Target
    https://download2278.mediafire.com/j47ixv4suolgKpgIpBqIqWLJg235tBO_0Xbzf1IoXFXPiZWb8aN3QAnSZQaBggQ8CNrBhFiQWf0-LO-vnhTdGpkSojG8xq4vh1XUMIPz6VSkViAOjFyuq1JbOZGwzhmtNsU2PVWNsAH5YKCetp3Cb-4nJInAUygxZaQsZEvkFMum1JQ/kr4xtv7lsmet8ar/XenoExecutor.zip
  • Sample260724-ns3lfayfmf

Malware Config

Targets

    • Target
      https://download2278.mediafire.com/j47ixv4suolgKpgIpBqIqWLJg235tBO_0Xbzf1IoXFXPiZWb8aN3QAnSZQaBggQ8CNrBhFiQWf0-LO-vnhTdGpkSojG8xq4vh1XUMIPz6VSkViAOjFyuq1JbOZGwzhmtNsU2PVWNsAH5YKCetp3Cb-4nJInAUygxZaQsZEvkFMum1JQ/kr4xtv7lsmet8ar/XenoExecutor.zip
    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks