Overview

overview

3

Static

static

3

XO.zip

windows11-21h2-x64

1

App/XOBV00...ck.exe

windows11-21h2-x64

3

XO_Library_Placer.exe

windows11-21h2-x64

1

Resubmissions

04/08/2026, 16:14

260804-tpy2qsvare8

04/08/2026, 15:48

260804-s89rxadb593

Analysis

  • user interaction
    yes
  • max time kernel
    284s
  • max time network
    282s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/08/2026, 15:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    App/XOBV0001/Binaries/XDPack.exe
  • Size 289KB
  • Sample260804-s89rxadb59
  • SHA256 fbdfb49f88dde345123251cec4fb9e1656a9c920c71a3ce8d2d93922a537ac13
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe
    "C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3256
  • C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe
    "C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe"
    1⤵
      PID:3284
    • C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe
      "C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe"
      1⤵
        PID:4960
      • C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe
        "C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe"
        1⤵
          PID:1820
        • C:\Windows\System32\rundll32.exe
          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
          1⤵
            PID:3164
          • C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe
            "C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe"
            1⤵
              PID:2304
            • C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe
              "C:\Users\Admin\AppData\Local\Temp\App\XOBV0001\Binaries\XDPack.exe"
              1⤵
                PID:4692

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads