General
- Target XenoDumpInspector.zip
- Size 4KB
- Sample260804-ve97paszew
- SHA256 5d66b204407ddd22bca04d617fae3f97f24e139c6ebe5937747cf22cd9ee301f
- MD5 8f422b83d38ff7f3dddd2ea64947980d
- SHA1 5ba3eb44d2d54dee420c537536d0d0123cc0ee50
- SHA512 6785988cf91ab846ce76ad616867f3a42529f076fdbb18d7e6355b95cf46f2835687b76aab2cdbaeeea987dc49d6050ec8c70325bccba8e2d4467d78eed787a6
- SSDEEP 96:1QIe48/n12nWRfe8VY7VPJwsu1SroqjnSxFSBhrU:1QJ48/1X/VYRPLu1EvjSXSQ
- TLSH T13DA16DBB532D5410E683A678B257D8B137CE078F1D59F41BBF68433D4C12921FA20639
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BUILD_EXE.cmd
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
BUILD_EXE.cmd
Resource
win11ltsc2024-20260709-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
BUILD_EXE.ps1
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral4
Sample
BUILD_EXE.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
900 seconds
Behavioral task
behavioral5
Sample
XenoDumpInspector.js
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral6
Sample
XenoDumpInspector.js
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target BUILD_EXE.cmd
- Size 133B
- SHA256 2b1bb5707405183995575b1261936855c07a7b162176379b33cd6320dc721a49
- MD5 6aafd32b28a826b436adf05a45ddc646
- SHA1 83c27b7e43bc5358249e7551e0f2ddf95eb68581
- SHA512 e739c7d401d5ea485dd3858c8ec275332292a2095312bcbbc107139f34b6118e6a85af73e424ad9f8d4252610edd53519d26fa057890a5dc4a3aea5e18c8fe81
- TLSH T16BC02B15A31C834C10D3A81614C548F00A0F018773818A427031032FFD5D054C324285
- MD5 SHA1 SHA512 TLSH
-
Executes dropped EXE
-
- Target BUILD_EXE.ps1
- Size 1KB
- SHA256 602cecb661067927fe42dfee3a2cbc9fa618116022fe76ca2fa7e9c47927c70c
- MD5 3fdffa2d75426b0a88296059fe343a42
- SHA1 2928e8f0d8ae8b920a4c02fa89256ba2ca22f017
- SHA512 13f36404bbde8a39fb6e4868888ff0cb8769e750d7d1bd5d64e452a9c6ac26c1bad830f3fb210583c7dab17b7b47ca3973ffbcd4992470220211c1f5c1ddbdf4
- TLSH T17631001CC65D8ED682F715BE4A609A83A083512F884D3D80F14C199DFFE593DC7AA27B
- MD5 SHA1 SHA512 TLSH
Score7/10-
Executes dropped EXE
-
- Target XenoDumpInspector.cs
- Size 9KB
- SHA256 abc2a9db00e4f6de88c355b6a010b617ac995765cba0f8132c3f378a3748c666
- MD5 ae4efe0d5a0e77feb2a94ef40a57caf9
- SHA1 b2f51d6acbe7b47c5bd994089853d044e07f39f3
- SHA512 871cbbdf9b6a69319bfde93be790f7679151fc9876dbeda325b50e0390bc630d09cc262c940a932cddbfad46c2b2ef1fb93847fec30c8db8383ced07caa4c102
- SSDEEP 192:lJellXJSulGNAWnx6Qw4R0OOnurvjy9JGa4oiIcAZmoIcgwkadNK1G:lQllXJmAWnxHOnuzY5r
- TLSH T1001272112C7785AA91E31066AB970196EBA7433B0B39AC70FDEC4B448F5886C87747BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10