6f5808c255596447cd55b2d44febb42f867ebe91837634475b7997b9aaf2426b | Triage™

Login
Reports

Overview

overview

8

Static

static

5

XboxManage...et.dll

windows10-2004-x64

3

XboxManage...et.dll

windows11-ltsc_2024-x64

3

XboxManage...on.dll

windows10-2004-x64

1

XboxManage...on.dll

windows11-ltsc_2024-x64

1

XboxManage...te.dll

windows10-2004-x64

3

XboxManage...te.dll

windows11-ltsc_2024-x64

3

XboxManage...ne.dll

windows10-2004-x64

1

XboxManage...ne.dll

windows11-ltsc_2024-x64

1

XboxManage...er.exe

windows10-2004-x64

3

XboxManage...er.exe

windows11-ltsc_2024-x64

3

XboxManage...pf.dll

windows10-2004-x64

1

XboxManage...pf.dll

windows11-ltsc_2024-x64

1

XboxManage...nt.dll

windows10-2004-x64

1

XboxManage...nt.dll

windows11-ltsc_2024-x64

1

XboxManage...er.exe

windows10-2004-x64

1

XboxManage...er.exe

windows11-ltsc_2024-x64

1

XboxManage...og.bat

windows10-2004-x64

8

XboxManage...og.bat

windows11-ltsc_2024-x64

8

XboxManage...01.exe

windows10-2004-x64

3

XboxManage...01.exe

windows11-ltsc_2024-x64

3

XboxManage...02.exe

windows10-2004-x64

1

XboxManage...02.exe

windows11-ltsc_2024-x64

1

XboxManage...03.exe

windows10-2004-x64

5

XboxManage...03.exe

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
XboxManager.zip
Size 16.6MB
Sample260730-ha8f3ssdkc
SHA256 6f5808c255596447cd55b2d44febb42f867ebe91837634475b7997b9aaf2426b
MD5 e936d8f65a3be822bf737d248b186665
SHA1 233d76276e142af6b88a50fd2a0b9ed318cdf6d2
SHA512 cda15af7397ea85fe1a39f36228d55faf69cda66dd04e1e91081efd3e49b25565c6d8fb3cf7bca04e22de2c556de534218503eac1e9b4aea8e33978aafe88cbd
SSDEEP 393216:uBH6WwjY0FVSwhQx2Br4foEzuRkS3C8WmM40n1DdLrI:uctQwBrIoEzMSkr01DdLU
TLSH
T12B0733335CA7BB21509A23416CFB00E924BB97BDD474A9DEA239252C3F4C4BC9B57748
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution exploit upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

XboxManager/AuroraAsset.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

XboxManager/AuroraAsset.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

XboxManager/Newtonsoft.Json.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XboxManager/Newtonsoft.Json.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

XboxManager/System.Data.SQLite.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

XboxManager/System.Data.SQLite.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

XboxManager/XboxEngine.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XboxManager/XboxEngine.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XboxManager/XboxManager.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

XboxManager/XboxManager.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

XboxManager/_db/Ookii.Dialogs.Wpf.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XboxManager/_db/Ookii.Dialogs.Wpf.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XboxManager/_db/System.Net.FtpClient.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XboxManager/_db/System.Net.FtpClient.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XboxManager/_db/XboxUpdater.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XboxManager/_db/XboxUpdater.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XboxManager/_db/log.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery execution exploit

Behavioral task

behavioral18

Sample

XboxManager/_db/log.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion discovery execution exploit

Behavioral task

behavioral19

Sample

XboxManager/_db/xb_01.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

XboxManager/_db/xb_01.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

XboxManager/_db/xb_02.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XboxManager/_db/xb_02.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XboxManager/_db/xb_03.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

XboxManager/_db/xb_03.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  XboxManager/AuroraAsset.dll
- Size 111KB
- SHA256 adfcd5fa3344e27b48c624f9b787a625ef3bab02085c02f7719f93bb89c75912
- MD5 cb7803773af0211bd759ff2806c7f924
- SHA1 903212047701dd8df87aac68d8db99fdbd148496
- SHA512 7bbdff3d957f419748419a8d48a69b43e4bf3d1bb9718151dd8e945751494d0088ff072778be8e84e1edb58740d7bb081a76a6fcffb1838cec954b2a5432c1ef
- SSDEEP 3072:gin8AR53ijiExhQ3uSqo2E/oTdcpz+Zs:t8ARUGErvTVZs
- TLSH
  T187B38E92F7417431D7ADF73F1612B61EB76106220922E1CF2BEC1B5E6C709A1CA527A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  XboxManager/Newtonsoft.Json.dll
- Size 704KB
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH
  T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  XboxManager/System.Data.SQLite.dll
- Size 1.0MB
- SHA256 b1bb322e29bf7c6d038b5d0dd19a10b70eeda9c3e4b241ab9074c750c5d69734
- MD5 63cfc416ff2b0cbaf01f725ba53eec42
- SHA1 98546d3a9fae93e906adc7d8ad4b8b311d72596d
- SHA512 b2f407351d63367575a90da0377da90479333bf70d4743770ab9f6e35b5e7ceacdb6ab294fd0b1a86ec0f7c792f3ede62c0bec77bfc5be64f99f08eddfc96dd3
- SSDEEP 24576:C6uUHJZPuEm7S+ElZ8MHQVASmjk20/yVxJOA:1u+vGglZ8MDdqKzJ
- TLSH
  T1B625AE55B7E2C0B1F5EE12B8D6B90EBA1D35A212931AD1C7B4D024E64EB06D17A3F343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  XboxManager/XboxEngine.dll
- Size 94KB
- SHA256 a7dbe535d1696d49b4f5f0cf617b41696e88b2ab039f5d287d869b0e661f8541
- MD5 39adbe0efa30ae20ff33f78c51d04035
- SHA1 23e092f9633c9570d322777a7d1c765e9350f11c
- SHA512 9aa96eee0f17e50993ec3f8b631bd61dfe5d24fcaadb8f871dfb05e0920342a4a9df66c5f63686e729b9ea1cb20dd447a6161a774e81e9898f0ef4a0e2367623
- SSDEEP 1536:X9JdBd25wgEjyAYxF1C5gBjCvubMmIY6jbC1GCcxI9eh5Cq2DPN8tEaRK5T0NJtO:lCF1RQt4EbecHCFDPN8tExcJwb
- TLSH
  T1DB93292C23EC4E1BE6BF9778F4F1612207B1B462B576E78D9C8561E918637C04A11BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  XboxManager/XboxManager.exe
- Size 16.7MB
- SHA256 61d6f8379d459586ba0ecf6eb8f4aa2491cea9184321b10b6469d41bfe1caa71
- MD5 dcbd643a4c19df4444758fa97dedbfca
- SHA1 da58d40f1ac69d50009d72bcf733a6c0bb3ecd30
- SHA512 e6cc0c1b826d7435772dde79ed4a601a7eb1a10520c9213ad64bf64b85e92ef4c0e419d7275b14a35e3202dbea0c0815b505404147e55e16bd066abb5c17c402
- SSDEEP 196608:+/X26wxBC/ScEvYtGRWzaQFtc4kvujv//TRWpg60pS+oB4zC4j6fk2XjpdYoPfHK:wE8xSYUercUjv/gp4MHo4kej7znp8aC
- TLSH
  T12407126433E59507F27B9770C4B8BB244A757E72AC66C61DA850768D3CF1B81AE20F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  XboxManager/_db/Ookii.Dialogs.Wpf.dll
- Size 105KB
- SHA256 04b8cb55ff481a4f4f9a60bc3c5e06ed78c12a8677c211621edcf9d8467bd823
- MD5 5926472580c7a7b45cd611dc0fb06244
- SHA1 a3b33bc8c9963f727bc2a2714ec6de0c607bca40
- SHA512 be05b4695896b4a2ad2ca63836c9d05084b8aa1b71929e1b081fd47b851282438bdf8c7bc65466ce7f3fe30335e743c0bd12aa52670b12d6eaec8b3bfd193056
- SSDEEP 1536:5lPwQgrQnQaIM9MsmdgdSrtP7QdniuLF+mnNuu48pMBqDALYHu+an+HeaP6kOdWF:5lNJIceEMGFHnM8A8HC++aPA3O
- TLSH
  T19FB36B32334C0769CAEF4A7DF810A1858770DE516A36DF674988B18E29733D14AB62F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  XboxManager/_db/System.Net.FtpClient.dll
- Size 79KB
- SHA256 ec52a54d15635fdab9f654bd4b5f8c56e5d68907ecf4062204f7d68e4daeaa48
- MD5 8a9634580fef32b2c1708e0072586413
- SHA1 415a60205468f64e53d131a26d7160ba54918da8
- SHA512 742f49f8ed1f931460cbd10be442bc4895ea66f617b1c996e4d53ba7c6da011433c0d07e6ff6f063c34fad7dbbbed852e63d5ceedcaed6f145c42fdf974076d0
- SSDEEP 768:HjVEnb3BX4OeeepBF1yvsF8KgaFIe1UcsPIrFS3Mq77gxfppqR+yJqfayg:HhEnt/uBX1HJFIHcsArgMJrpVriyg
- TLSH
  T16F83E66023E85A09E6BF7B7CB5BB451047F5FD62A973D71E2D8A50EE0823B905D103A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  XboxManager/_db/XboxUpdater.exe
- Size 296KB
- SHA256 8e688c774fdcd9f1e6aa78e1622214de193124ec191447a38dab673aa0e10fb9
- MD5 3c397b255205b1f9edd80da2c795d8b8
- SHA1 a73817d4ac56feceab1c8f6731338083a4e86974
- SHA512 861005cd55216f11f249a3ee0d1b4600d7eb1397e15bd6f45b7f4b843ac6e42dc371efa02e545e3399f32b61c717e3b17d94a26c656cbb692ea37119b9de2242
- SSDEEP 6144:o61MDZUnDzDo64hT/zcpo8Ax/hgWwvkcEfMQhAdSGU:LCZUjobzxx/qO
- TLSH
  T10C548C7833228B4BE395C238E5A8F7144E715AB4ADA3C6C1FDA7396D7BE4B008D55B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  XboxManager/_db/log.bat
- Size 12KB
- SHA256 73b93b718a8ea9a7a0faeae6d1126d747489b750cccd006b00e86a9ee1492243
- MD5 412276a0f5e7cc17f720e5e9ea0c6c7e
- SHA1 6a01bcc4803faa64929636908c442a3e01f2de44
- SHA512 b5ea765daab93e87ca12c273f956c307bd7a88fbccf452abac70700df0e9bd7412d9c851a489c60a5c261d9373ed91ad37cb5e5bcf69451cf66238a091679632
- SSDEEP 192:5gYUxl+6v+eD6TdzEwiDp3dnrInfBk0msnsmQfJX9nLgd3C:5beY6v+ZdzuMIEd3C
- TLSH
  T19B422E09DACBE87BF5226A962593C7EC0C9F5146BE8523431F16BC0841CF83C71E69E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution exploit
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
behavioral17 behavioral18
- Target
  XboxManager/_db/xb_01.exe
- Size 135KB
- SHA256 293c152ce3c06368e7c16e75ee43a00551570910a90befcc633f06cddb2e72dc
- MD5 83a50d2131f9ed6f1cf10c61acdd19d6
- SHA1 2c9b1a5434e8959f230ccff58056fa3b7af8ea3a
- SHA512 a41e83bf8f89fa089eb5d92a262d9638869cf65239cb98f8c31b647fc949650fcdef87dc142ca563c41eb095f01792ef71414b1742a82b0ae1c9d73291b85f87
- SSDEEP 1536:UP0+CUKHRcZKaCAfEpn0WF3felGfiexzAo4nG5INf4XqXqIvSs31Ni+BRsYnOBaL:Z5+wqEbGYtAo43D3v7BRsbSJ
- TLSH
  T147D37C2570C0C072D88729315675CBB29E76B476473890C3BB8D1EBA6F203E2D67A35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  XboxManager/_db/xb_02.exe
- Size 1.1MB
- SHA256 1459fcf8ff5a89e039b02c68c06b006b7a036f3b1ca237c2d7e03d61bd211d47
- MD5 548ad5e37657749cece2a8cc9dd06bf9
- SHA1 daa985c2b4b146253a6a47e8c735609c2864a49b
- SHA512 5b1e609a37028190b8abefb6b892b15f0d7b1d4c769c7b63fc64a563e1413b2f29ad00b9988d6c5a15b32d92fa5cc63ce6133f1824e81aff9f9933400de03b4e
- SSDEEP 24576:zuQzZRq3Tfj2IbQ/A7BksK2Np7gfG4jaFX2p7q5wBm+:SQzToTfaIbQ/A9K2Np7ge4jaFXKq5wBt
- TLSH
  T192353A1BF76691FCC959C0748B766232BA727C0E46363E7B57D48B302E56A106F2CB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  XboxManager/_db/xb_03.exe
- Size 184KB
- SHA256 d93c1b814ad6ff124834f4235bf8aac9f09dba8d69c335ebecc8d6efe8d5a062
- MD5 a1924fa8082efb8df878ba9454698d85
- SHA1 231f4c77d4260074035dddd795273c355385b33c
- SHA512 39e5a91114b2fafd097ab1d6784a3b1e261ad98e2df9da9a5b687a2fe82748b85f7ecedd2f5a2167e4464c98eeee87c15cac40dec9dbabe3ad8c1f477bebed6d
- SSDEEP 3072:C9qgMC/dJVt8tKvw6+M7bp73HcrTUdSn13cjoQRoXPOgK:C9XdLqtKvw6+qbRbdSpUtwOgK
- TLSH
  T1160412E0E11053A5EADB6C3BBC8D1516D80E563806CD9BAC777E8D2F41F99BA0243C27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

defense_evasiondiscoveryexecutionexploit

behavioral18

defense_evasiondiscoveryexecutionexploit

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy