Analysis
- user interaction
yes - max time kernel
314s - max time network
306s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/08/2026, 15:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XO.zip
Resource
win11-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
App/XOBV0001/Binaries/XDPack.exe
Resource
win11-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
XO_Library_Placer.exe
Resource
win11-20260513-en
0 signatures
900 seconds
General
- Target XO.zip
- Size 326.7MB
- Sample260804-s89rxadb59
- SHA256 550502ff88abffdce9e3087067894bc8f95ad2dc6765f647802058ac45373092
- MD5 9de8c95a8eb4be0750c9cb6535f107af
- SHA1 99f97583b5ba35e410d10068ee82fc83ce6efa3f
- SHA512 957a59134e030c749eef00e91571a73cb7055424643b3c7922f06b0e4fa7081c9d5ca1e6e0049fb713ff9ce44175e0d18f301bf2b8363eb3adaba20ca4e0fd40
- SSDEEP 6291456:r4+2ya1GO6L085vN/tW5u289wuXUXgKjS92/3Zv1re8YREv:b2Hb6L02kAOEUXIOnre8YRA
- TLSH T1CEF8335F712105EFDE3024E0E7BA4972038C9EBD7B98ECAB696C9279FCCD55A4903160
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\XO.zip1⤵PID:4716
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4248
-
C:\Users\Admin\Desktop\XO\XO_Library_Placer.exe"C:\Users\Admin\Desktop\XO\XO_Library_Placer.exe"1⤵PID:3652