Analysis
- user interaction
yes - max time kernel
80s - max time network
78s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/07/2026, 17:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XenoUI.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
XenoUI.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target XenoUI.exe
- Size 145KB
- Sample260731-wflfdsec64
- SHA256 0f0b1c9d186e46dbba795176287c07e874b3222b0a98ebc8a32525afc60d106e
- MD5 2e268797de4eb51aa0089b678d184033
- SHA1 1c9b735816b3231bc3c88afdb71b0ca0d83cd15e
- SHA512 f5f4917f676af9a916cc4a5bc164c2e56b9084f4346f1fa741a1190c651a8aaa9f888d9a07a8f63fbf1e8fbe48a971df5fd95bc561f4e850c1ecaf49d1aabb2c
- SSDEEP 3072:LBMd4YOG6EEaScUrl12TbyG1VCV57Pby6SgV9Sj0LC55dVPOdX0t9lhx:+4trr2HyGKdby6p9Sj0Uh2dkhhx
- TLSH T199E3AF41376C8E22CAAF0FBD64B252955A71BF16A563E70E14CC349C6CF7382865236F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\XenoUI.exe"C:\Users\Admin\AppData\Local\Temp\XenoUI.exe"1⤵PID:3280
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1960