General

  • Target
    Xeno_244c0078a88c (1).zip
  • Size 32.2MB
  • Sample260727-sstqrabf96
  • SHA256 662cc1b77acc3246961608b6ab6cd8f208dbd5a92872dde63581380e1726720d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      Xeno_244c0078a88c (1).zip
    • Size 32.2MB
    • SHA256 662cc1b77acc3246961608b6ab6cd8f208dbd5a92872dde63581380e1726720d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xenooo.exe
    • Size 86.1MB
    • SHA256 271b187d83511cb1828695cfc3ab4b4fdd96e655470d9fbdfd7ec9ebf3bf0bf4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks