Overview
overview
8Static
static
5XboxManage...et.dll
windows10-2004-x64
3XboxManage...et.dll
windows11-ltsc_2024-x64
3XboxManage...on.dll
windows10-2004-x64
1XboxManage...on.dll
windows11-ltsc_2024-x64
1XboxManage...te.dll
windows10-2004-x64
3XboxManage...te.dll
windows11-ltsc_2024-x64
3XboxManage...ne.dll
windows10-2004-x64
1XboxManage...ne.dll
windows11-ltsc_2024-x64
1XboxManage...er.exe
windows10-2004-x64
3XboxManage...er.exe
windows11-ltsc_2024-x64
3XboxManage...pf.dll
windows10-2004-x64
1XboxManage...pf.dll
windows11-ltsc_2024-x64
1XboxManage...nt.dll
windows10-2004-x64
1XboxManage...nt.dll
windows11-ltsc_2024-x64
1XboxManage...er.exe
windows10-2004-x64
1XboxManage...er.exe
windows11-ltsc_2024-x64
1XboxManage...og.bat
windows10-2004-x64
8XboxManage...og.bat
windows11-ltsc_2024-x64
8XboxManage...01.exe
windows10-2004-x64
3XboxManage...01.exe
windows11-ltsc_2024-x64
3XboxManage...02.exe
windows10-2004-x64
1XboxManage...02.exe
windows11-ltsc_2024-x64
1XboxManage...03.exe
windows10-2004-x64
5XboxManage...03.exe
windows11-ltsc_2024-x64
5Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 06:33
Behavioral task
behavioral1
Sample
XboxManager/AuroraAsset.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
XboxManager/AuroraAsset.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
XboxManager/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
XboxManager/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
XboxManager/System.Data.SQLite.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
XboxManager/System.Data.SQLite.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
XboxManager/XboxEngine.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
XboxManager/XboxEngine.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
XboxManager/XboxManager.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
XboxManager/XboxManager.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
XboxManager/_db/Ookii.Dialogs.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
XboxManager/_db/Ookii.Dialogs.Wpf.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
XboxManager/_db/System.Net.FtpClient.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
XboxManager/_db/System.Net.FtpClient.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
XboxManager/_db/XboxUpdater.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
XboxManager/_db/XboxUpdater.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
XboxManager/_db/log.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
XboxManager/_db/log.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
XboxManager/_db/xb_01.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
XboxManager/_db/xb_01.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
XboxManager/_db/xb_02.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
XboxManager/_db/xb_02.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
XboxManager/_db/xb_03.exe
Resource
win10v2004-20260513-en
General
- Target XboxManager/System.Data.SQLite.dll
- Size 1.0MB
- Sample260730-ha8f3ssdkc
- SHA256 b1bb322e29bf7c6d038b5d0dd19a10b70eeda9c3e4b241ab9074c750c5d69734
- MD5 63cfc416ff2b0cbaf01f725ba53eec42
- SHA1 98546d3a9fae93e906adc7d8ad4b8b311d72596d
- SHA512 b2f407351d63367575a90da0377da90479333bf70d4743770ab9f6e35b5e7ceacdb6ab294fd0b1a86ec0f7c792f3ede62c0bec77bfc5be64f99f08eddfc96dd3
- SSDEEP 24576:C6uUHJZPuEm7S+ElZ8MHQVASmjk20/yVxJOA:1u+vGglZ8MDdqKzJ
- TLSH T1B625AE55B7E2C0B1F5EE12B8D6B90EBA1D35A212931AD1C7B4D024E64EB06D17A3F343
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2028 wrote to memory of 5084 2028 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\XboxManager\System.Data.SQLite.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2028 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\XboxManager\System.Data.SQLite.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:5084
-