Overview

overview

8

Static

static

3

Xenooo.exe

windows10-2004-x64

8

Xenooo.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Xeno_e1910e632338.zip
  • Size 32.2MB
  • Sample260729-a3nclsdb69
  • SHA256 f6268e2c27f14cf689b978a8f06bf0dc03535f73f46157f1606bcfc27e22ee1b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      Xenooo.exe
    • Size 86.1MB
    • SHA256 271b187d83511cb1828695cfc3ab4b4fdd96e655470d9fbdfd7ec9ebf3bf0bf4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks