Analysis
- max time kernel
900s - max time network
538s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 16:55
Static task
static1
Behavioral task
behavioral1
Sample
BUILD_EXE.cmd
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
BUILD_EXE.cmd
Resource
win11ltsc2024-20260709-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
BUILD_EXE.ps1
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral4
Sample
BUILD_EXE.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
900 seconds
Behavioral task
behavioral5
Sample
XenoDumpInspector.js
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral6
Sample
XenoDumpInspector.js
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target XenoDumpInspector.js
- Size 9KB
- Sample260804-ve97paszew
- SHA256 abc2a9db00e4f6de88c355b6a010b617ac995765cba0f8132c3f378a3748c666
- MD5 ae4efe0d5a0e77feb2a94ef40a57caf9
- SHA1 b2f51d6acbe7b47c5bd994089853d044e07f39f3
- SHA512 871cbbdf9b6a69319bfde93be790f7679151fc9876dbeda325b50e0390bc630d09cc262c940a932cddbfad46c2b2ef1fb93847fec30c8db8383ced07caa4c102
- SSDEEP 192:lJellXJSulGNAWnx6Qw4R0OOnurvjy9JGa4oiIcAZmoIcgwkadNK1G:lQllXJmAWnxHOnuzY5r
- TLSH T1001272112C7785AA91E31066AB970196EBA7433B0B39AC70FDEC4B448F5886C87747BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\XenoDumpInspector.js1⤵PID:5744
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4620
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4680