Xeno Temp V2[.]exe

Resubmissions

28/07/2026, 23:12

260728-265vlszyfw

28/07/2026, 23:09

260728-25f5vszydw5

Sharing

Copy URL Twitter E-mail

General

Target
Xeno Temp V2.exe
Size 2.6MB
Sample260728-265vlszyfw
SHA256 c3fec7bd1d33da3345a78f267505eb35234dc33d6d7c8e77ce3d01b0ea1eab3f
MD5 10b34e3322fa5426520c82dbcfb2ca25
SHA1 e886d0f7b26b0457de0c25902cd60f09b8ca8039
SHA512 4dc03ed3f4d0afca195fb40b3855d887c8091b63d0830544ba707abfecf4c1377fb1bd724e95bbde4c65a84915b2daf9248baf0f84d9dcbcf63395851d568c42
SSDEEP 49152:8biD7eCxumqkeJTog5K1cw1YRSZ1kMxgzYrU6n:8iDhxqw1YRSZ1kMxgzYAm
TLSH
T12EC58CA942AC05BCD266C238958A5643F3F3BD4D53A4EFFB16E0CCA41E1B5D0F639A41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xeno Temp V2.exe

File Explorer

Xeno Temp V2.exe

.exe 2.6MB

Xeno Temp V2.exe

IMPHASH 915e06142a34b99ffb629912d141610b
SHA256 c3fec7bd1d33da3345a78f267505eb35234dc33d6d7c8e77ce3d01b0ea1eab3f
MD5 10b34e3322fa5426520c82dbcfb2ca25
SHA1 e886d0f7b26b0457de0c25902cd60f09b8ca8039
SHA512 4dc03ed3f4d0afca195fb40b3855d887c8091b63d0830544ba707abfecf4c1377fb1bd724e95bbde4c65a84915b2daf9248baf0f84d9dcbcf63395851d568c42
SSDEEP 49152:8biD7eCxumqkeJTog5K1cw1YRSZ1kMxgzYrU6n:8iDhxqw1YRSZ1kMxgzYAm
TLSH
T12EC58CA942AC05BCD266C238958A5643F3F3BD4D53A4EFFB16E0CCA41E1B5D0F639A41
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2394128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LeaveCriticalSection LocalFree GetSystemDirectoryW FreeLibrary LoadLibraryW SleepEx GetTickCount MultiByteToWideChar WideCharToMultiByte MoveFileExW WaitForSingleObjectEx GetEnvironmentVariableA GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects VerSetConditionMask VerifyVersionInfoW GetFileSizeEx OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime SetUnhandledExceptionFilter WakeAllConditionVariable CreateFileMappingW VirtualProtect CreateThread DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy AddVectoredExceptionHandler GetLastError CreateFileW K32EnumProcessModules InitializeCriticalSection VirtualQuery GetTickCount64 GetSystemInfo GetSystemTime Process32NextW Process32FirstW CreateToolhelp32Snapshot GetThreadContext GetCurrentThread GetCurrentProcessId GetCurrentProcess QueryPerformanceFrequency QueryPerformanceCounter CheckRemoteDebuggerPresent IsDebuggerPresent GetFileInformationByHandleEx AreFileApisANSI CreateFile2 SetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetCurrentDirectoryW GetLocaleInfoEx FormatMessageA GetCurrentThreadId SleepConditionVariableSRW EnterCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive FormatMessageW SetLastError QueryFullProcessImageNameW GetModuleHandleA UnmapViewOfFile GetModuleFileNameA GetModuleFileNameW GetProcAddress GetModuleHandleW CreateProcessA WaitForSingleObject CloseHandle OutputDebugStringA GetTempPathA ExpandEnvironmentStringsW Sleep Beep GetStdHandle SetConsoleTitleA SetConsoleMode GetConsoleMode ExpandEnvironmentStringsA MapViewOfFile

user32

wsprintfA FindWindowA MessageBoxA

advapi32

RegEnumKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA OpenProcessToken PrivilegeCheck LookupPrivilegeValueW RegCreateKeyExW RegSetValueExW AddAccessAllowedAce GetLengthSid GetTokenInformation InitializeAcl IsValidSid RegCreateKeyExA CryptEncrypt CryptImportKey CryptDestroyKey SystemFunction036 CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW ConvertSidToStringSidA CopySid SetSecurityInfo RegDeleteKeyA RegCloseKey

shell32

ShellExecuteA SHGetFolderPathA

ole32

CoInitialize CoTaskMemFree CoCreateInstance CoUninitialize

msvcp140

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ??Bios_base@std@@QEBA_NXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?fail@ios_base@std@@QEBA_NXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Random_device@std@@YAIXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _Thrd_detach ?_Xinvalid_argument@std@@YAXPEBD@Z _Xtime_get_ticks ??Bid@locale@std@@QEAA_KXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??7ios_base@std@@QEBA_NXZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ?_Xbad_function_call@std@@YAXXZ ?id@?$ctype@D@std@@2V0locale@2@A ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Xlength_error@std@@YAXPEBD@Z _Thrd_join _Thrd_id _Mtx_lock _Mtx_unlock _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ _Query_perf_counter _Query_perf_frequency ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?good@ios_base@std@@QEBA_NXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

urlmon

URLDownloadToFileA

psapi

GetModuleInformation

crypt32

CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringW CertFindExtension CertFreeCertificateChain CryptDecodeObjectEx PFXImportCertStore CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CryptStringToBinaryW CertAddCertificateContextToStore CertOpenStore

ws2_32

setsockopt socket inet_pton gethostname ioctlsocket htons getsockname ntohs WSASetLastError sendto WSAStartup inet_ntop getpeername WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockopt recvfrom freeaddrinfo recv connect getaddrinfo bind listen htonl WSACleanup closesocket accept select __WSAFDIsSet WSAIoctl WSAGetLastError

shlwapi

PathFindFileNameW

userenv

UnloadUserProfile

bcrypt

BCryptGenRandom

vcruntime140

strstr strrchr wcschr __C_specific_handler memchr memcmp memset __current_exception_context __current_exception strchr __std_terminate __std_exception_copy __std_exception_destroy _CxxThrowException memmove memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_resetstkoflw _beginthreadex terminate abort _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo system exit __sys_errlist _register_thread_local_exe_atexit_callback _c_exit __p___argv __sys_nerr _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type _initterm_e _get_initial_narrow_environment _initterm _errno _exit __p___argc

api-ms-win-crt-string-l1-1-0

wcslen strncmp toupper _strdup wcsncpy strpbrk wcsncmp strlen strcmp strspn wcspbrk _wcsicmp wcscmp strcspn _wcsdup tolower

api-ms-win-crt-stdio-l1-1-0

fgets fsetpos _lseeki64 _fseeki64 fwrite __p__commode fread _read _write _pclose __acrt_iob_func _fileno _close _set_fmode fputc fgetpos _popen setvbuf __stdio_common_vsprintf _wfopen _wopen ungetc __stdio_common_vsscanf fgetc _get_stream_buffer_pointers fflush fclose ftell fseek feof fputs

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file _unlink _wstat64 _fstat64

api-ms-win-crt-heap-l1-1-0

free realloc malloc _set_new_mode _callnewh calloc

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-multibyte-l1-1-0

_mbscmp

api-ms-win-crt-math-l1-1-0

_dsign _fdopen __setusermatherr

api-ms-win-crt-convert-l1-1-0

strtoul strtoull atoi strtod strtol strtoll wcstombs

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_gmtime64 strftime _time64 _localtime64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func localeconv

api-ms-win-crt-utility-l1-1-0

qsort