General
- Target Xeno-v1.3.55.zip
- Size 6.8MB
- Sample260727-2zae5atxcs
- SHA256 1c289425268302a153c03e144c0ee13fcbbac0081780f68db6a0a793a7adb658
- MD5 76ed2d5e9804bfbc38a3a16c2a30eb82
- SHA1 7d238524a38180bedb841d40b64ff38ae83383f4
- SHA512 2e00bbede4d28ae14f7b395eb948755c7144c4ce45231757e4623b476ad3ff8f10122355b88473a84dca6137d1ff58d15a5f854566ec8401059356116704a846
- SSDEEP 196608:d/Fs72qPGBvG7bM0t2XaCzx/sQ/28lgSjJh7d5yV/vJg:d/F62qP/nM7ha8lgU5yV/vJg
- TLSH T1F86633ECA7F818C2F92481BD9D601BF87613F7857611961BE24814D272D7DC0AA87B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Xeno-v1.3.55/Xeno.exe
Resource
win11-20260513-es
22 signatures
300 seconds
Malware Config
Targets
-
- Target Xeno-v1.3.55/Xeno.exe
- Size 164KB
- SHA256 2a005904a24a22d69a5629669b2781b41a0d004f625238d971fc5adb19e91439
- MD5 2f90725278a0dd0285f0260d6801a8a1
- SHA1 d8d7a5573e7edff422f803053d73ea835a8016cb
- SHA512 2614e7212b408e2d342f4c9114221283e96ded888891afa8ae251684fb8bb2991a1f254c38a6ff16a87f05c0b42637d860d22a681469c8cb71f65d3214fc6979
- SSDEEP 3072:120jWfVKLer5haSpfO9D/y7jXEkemZA4nsSyU34g9:4IVSpfO9jkS44U/9
- TLSH T176F33B07A6A850BEE1B3D679C9924941FB723C558B71A6CF03507AB60F777D0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1