General
- Target Xeno Free V3.exe
- Size 638KB
- Sample260730-tyysbsv1dv
- SHA256 4d1946b19705f63006d8d3da219beee5f82c1c24a8349d565e9369f8e23bfdbc
- MD5 3029f3829ac010e1041c6859176eb1fb
- SHA1 a7af533475fae0e3ef82868deb480fe5933cea62
- SHA512 5f72d177613f996abe63dd9c03001abc1d3efbacd57de81b40ff64ad5df8e2b904cef07c9df5eba9a5be2d0323d20b4b05e23c0aa0e21fc92d85e205b171d9cd
- SSDEEP 12288:y/mAwSrrz3uyrXSTViVn/dhyC6YLK2eood:QmAHr7I5iVn/dh+YW2I
- TLSH T130D4AF40F2E484B5D17B613899B6EB1BEB377858073096CF73D484682FE76E08AB5712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xeno Free V3.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target Xeno Free V3.exe
- Size 638KB
- SHA256 4d1946b19705f63006d8d3da219beee5f82c1c24a8349d565e9369f8e23bfdbc
- MD5 3029f3829ac010e1041c6859176eb1fb
- SHA1 a7af533475fae0e3ef82868deb480fe5933cea62
- SHA512 5f72d177613f996abe63dd9c03001abc1d3efbacd57de81b40ff64ad5df8e2b904cef07c9df5eba9a5be2d0323d20b4b05e23c0aa0e21fc92d85e205b171d9cd
- SSDEEP 12288:y/mAwSrrz3uyrXSTViVn/dhyC6YLK2eood:QmAHr7I5iVn/dh+YW2I
- TLSH T130D4AF40F2E484B5D17B613899B6EB1BEB377858073096CF73D484682FE76E08AB5712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory