1c289425268302a153c03e144c0ee13fcbbac0081780f68db6a0a793a7adb658

Sharing

Copy URL Twitter E-mail

General

Target
Xeno-v1.3.55-d47d833e (2).zip
Size 6.8MB
Sample260804-y12n8adn8t
SHA256 1c289425268302a153c03e144c0ee13fcbbac0081780f68db6a0a793a7adb658
MD5 76ed2d5e9804bfbc38a3a16c2a30eb82
SHA1 7d238524a38180bedb841d40b64ff38ae83383f4
SHA512 2e00bbede4d28ae14f7b395eb948755c7144c4ce45231757e4623b476ad3ff8f10122355b88473a84dca6137d1ff58d15a5f854566ec8401059356116704a846
SSDEEP 196608:d/Fs72qPGBvG7bM0t2XaCzx/sQ/28lgSjJh7d5yV/vJg:d/F62qP/nM7ha8lgU5yV/vJg
TLSH
T1F86633ECA7F818C2F92481BD9D601BF87613F7857611961BE24814D272D7DC0AA87B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Xeno-v1.3.55-d47d833e (2).zip
- Size 6.8MB
- SHA256 1c289425268302a153c03e144c0ee13fcbbac0081780f68db6a0a793a7adb658
- MD5 76ed2d5e9804bfbc38a3a16c2a30eb82
- SHA1 7d238524a38180bedb841d40b64ff38ae83383f4
- SHA512 2e00bbede4d28ae14f7b395eb948755c7144c4ce45231757e4623b476ad3ff8f10122355b88473a84dca6137d1ff58d15a5f854566ec8401059356116704a846
- SSDEEP 196608:d/Fs72qPGBvG7bM0t2XaCzx/sQ/28lgSjJh7d5yV/vJg:d/F62qP/nM7ha8lgU5yV/vJg
- TLSH
  T1F86633ECA7F818C2F92481BD9D601BF87613F7857611961BE24814D272D7DC0AA87B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Xeno-v1.3.55/Microsoft.Web.WebView2.Core.dll
- Size 557KB
- SHA256 11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
- MD5 b037ca44fd19b8eedb6d5b9de3e48469
- SHA1 1f328389c62cf673b3de97e1869c139d2543494e
- SHA512 fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
- SSDEEP 12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
- TLSH
  T15BC4402123FD8A1AE6F63BB5A57407709BFAFC967979D39D0598251C0D72B408AE0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Xeno-v1.3.55/Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 5696366f7458da940cc986dc5d3d4549a2368512acd769014ecbb07b47bd88b4
- MD5 8153423918c8cbf54b44acec01f1d6c2
- SHA1 f0c3c5412b809725e6d4809230adb15cc7d83ad2
- SHA512 f3dc771e37c71479d332142ec5a9c5c3f39ca71937f595a0f7482ae5aaaafd92e932efc9b0363d4511d547f3c8b2e0497ebbf8356e7d07fc344f4e5715b0ee87
- SSDEEP 768:1sjCEEHJ9l0EeFZ2sxIHzttZDgcEST3p4Jjrjh2jJ+SG2au8vxJKia5/Zi/ZGQKk:wCEB15azttZDgcEST3p4JjrjaJ+SG2a/
- TLSH
  T1B4034B0483DCC617D6EB6FB8A5B491620B7ABF837960D36D1C84F5E90DB37A0891076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Xeno-v1.3.55/Microsoft.Web.WebView2.Wpf.dll
- Size 50KB
- SHA256 b628d6133bf57b7482a49aa158e45b078df73ee7d33137ac1336d24ac67ed1b4
- MD5 4a292c5c2abf1aab91dee8eecafe0ab6
- SHA1 369e788108e5fb0608a803fa2e5a06690b4464b5
- SHA512 ca22adfff9789730e4c02343e320d80b8466cfc5a15f662cefe376b7ee29dea571004c1c26cd3f50c0d24e646f2b36b53fa86835678f46f335d65eec52431cde
- SSDEEP 1536:gpGhWMhWLF9jwKi8LDP/ryEH0GBy4JjrD1aah/UaOzk6hKKa5/Bi/IGCv0Z0T6Cc:taBi8LDP/b0GBy4JjrD1aah/UaOzk6hz
- TLSH
  T12E33398047AD8533D6EF4FB450B481214B79BE83B9B1E78A1DC8F4E91DA77800A543AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Xeno-v1.3.55/Newtonsoft.Json.dll
- Size 695KB
- SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
- MD5 adf3e3eecde20b7c9661e9c47106a14a
- SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
- SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
- SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
- TLSH
  T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Xeno-v1.3.55/WebView2Loader.dll
- Size 161KB
- SHA256 465a7ddfb3a0da4c3965daf2ad6ac7548513f42329b58aebc337311c10ea0a6f
- MD5 c5f0c46e91f354c58ecec864614157d7
- SHA1 cb6f85c0b716b4fc3810deb3eb9053beb07e803c
- SHA512 287756078aa08130907bd8601b957e9e006cef9f5c6765df25cfaa64ddd0fff7d92ffa11f10a00a4028687f3220efda8c64008dbcf205bedae5da296e3896e91
- SSDEEP 3072:7evoTTlTRTyiuPThTNTKm81SbbMYSPLNsknZiZ2HZ5AaliiT88FEtJ57dXSvlCW:HTlTRTyiuPThTNTKmFQdhsknZiMHfEti
- TLSH
  T120F36C5B72E4407BE16B8274C9A34A11E77778110B60ABEF03A447791F237D4AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Xeno-v1.3.55/Xeno.dll
- Size 2.3MB
- SHA256 7125b2f8f8753ad2770fec80ef0372a4954282ab1b9011460b9eee62715da6a9
- MD5 b63a7182f3a2ed888e84507c7a63e2c7
- SHA1 67100aebb8a86c4e95280d9833a7dcca6769875b
- SHA512 adfa28e90568e9519201bdc7f4e3d84a8b090702201806c3d85a490385aff743d7959711a3a4265301e6ea956d112d4ecf41ddfbf292f31fcc5edc61ae95d0f7
- SSDEEP 49152:PIMHwQLHRlQWH8ra1/dtOyv37wVVpmZZuqrJ17/Mh:Pqz0/ZT6
- TLSH
  T15DB59F17A6A901ECD076D1F88A5B5513E7B17C4903206BEB02E0B5752F27AF68F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  Xeno-v1.3.55/Xeno.exe
- Size 164KB
- SHA256 2a005904a24a22d69a5629669b2781b41a0d004f625238d971fc5adb19e91439
- MD5 2f90725278a0dd0285f0260d6801a8a1
- SHA1 d8d7a5573e7edff422f803053d73ea835a8016cb
- SHA512 2614e7212b408e2d342f4c9114221283e96ded888891afa8ae251684fb8bb2991a1f254c38a6ff16a87f05c0b42637d860d22a681469c8cb71f65d3214fc6979
- SSDEEP 3072:120jWfVKLer5haSpfO9D/y7jXEkemZA4nsSyU34g9:4IVSpfO9jkS44U/9
- TLSH
  T176F33B07A6A850BEE1B3D679C9924941FB723C558B71A6CF03507AB60F777D0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral14 behavioral15
- Target
  Xeno-v1.3.55/Xeno.exp
- Size 1KB
- SHA256 2737ec0be101378e9d7c457c3742dcb7512058abd51e859ccf963c9840f29646
- MD5 30d09a0d2e236a86710df11467960877
- SHA1 bf3bb1daa2058715363ca17365bc012ed723f0ee
- SHA512 fb9cbef749093d74a3f596e1b642bc2518880bdff76050f970a7fd3cd5434964ed0075af1c9e9ba4241d2dfa5dfdac5f3fa1008a8b450bc8ab5af9753e347614
- TLSH
  T1D821CE0197C09D12F1045D38D2D6A60AF7F3FE8297C7431E5BC4811B2D8B7CAA254822
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  Xeno-v1.3.55/Xeno.lib
- Size 2KB
- SHA256 de95b2d168d78458fa069d3935a46abd83e2d3f875bfa624c4cc4ac5d4e8bcda
- MD5 f40c3ae3b8a2a58a2cb96d2c2b274962
- SHA1 7feb29296cb6cd58cc4149aca153e652c8e64b9c
- SHA512 69d270c1994af305cc3117fb15d0d8ceb34ab65551c0ed175ddbb54cd1ac1658c25e102e8ecd68286069c0ff75e12d42fa17e161837b976b1360e43a3016dfdc
- TLSH
  T1C251CC37D5D64E2FD72CC4B98082A89D267C754A2303AF3F39AC14E147BAB98D391C56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  Xeno-v1.3.55/XenoUI.deps.json
- Size 2KB
- SHA256 2ade2647d54684134fa2d7d100b2dd2666a061d3c7631492a2e973f0e1a89af5
- MD5 f10366d821adc76e6f2abccd8b5d5b7d
- SHA1 c629f0f16a6b80bd2947422a24103ebde4e53ef8
- SHA512 f2c0a47d133704c7a3d65f86cc4f4987f0626adeffd808e4c5afccaf01c586a4377067be749df027da6619a88f4cae453b841368542b0df6b11e40a33ac3cb5d
- TLSH
  T1A1514315E9404EA748B02BFA657942C9F721136F6002594BB8BD289CCFB7F766181F34
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  Xeno-v1.3.55/XenoUI.dll
- Size 145KB
- SHA256 0f0b1c9d186e46dbba795176287c07e874b3222b0a98ebc8a32525afc60d106e
- MD5 2e268797de4eb51aa0089b678d184033
- SHA1 1c9b735816b3231bc3c88afdb71b0ca0d83cd15e
- SHA512 f5f4917f676af9a916cc4a5bc164c2e56b9084f4346f1fa741a1190c651a8aaa9f888d9a07a8f63fbf1e8fbe48a971df5fd95bc561f4e850c1ecaf49d1aabb2c
- SSDEEP 3072:LBMd4YOG6EEaScUrl12TbyG1VCV57Pby6SgV9Sj0LC55dVPOdX0t9lhx:+4trr2HyGKdby6p9Sj0Uh2dkhhx
- TLSH
  T199E3AF41376C8E22CAAF0FBD64B252955A71BF16A563E70E14CC349C6CF7382865236F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  Xeno-v1.3.55/XenoUI.pdb
- Size 43KB
- SHA256 1a7ffb0af7965eae68973bf91e9ff2a7d9c8d4772d9d6dcf13121d8ecf3c8cb5
- MD5 bf802ef32e03f974a575ee7df4e10c0f
- SHA1 94719450650fad6e29648e92ac2a60a917b28a0d
- SHA512 c5cad9f1c6f653d71885d6a34fa9b993bdeba40a44c0a71144ad02e5c0f238b4c8fb587a6212e42903f7d89d564def8f7333f4c51417ffa155b51e799718b59f
- SSDEEP 768:pRwlkm+Vdp3MONnc+x3ZrjzGlV3S0M4uWht7Fd1WeZSv3JKs5e1b33s71bMinoVT:PwlkVT3MO9ccJjzGlVC0MIjvWech5ar7
- TLSH
  T12F13497B9388C626C6261476587BC38CB734C3242786FF32F1E66628ECAF7184776654
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  Xeno-v1.3.55/XenoUI.runtimeconfig.json
- Size 516B
- SHA256 05917b409d59af31bc8d3021bc06302a0c21c7d05b449603d6cc9f0301a2b66c
- MD5 6cc5992b5f24e3ff259ff61441f0bce9
- SHA1 98e9fecdc80c90f6d250b9afca50eab4c4c0151b
- SHA512 64b9612846b342fd254c439be1833b4fde0e7bcea5979879d333b54a7633a9936df65639101ddb28023a3877f9a4dd1cbde29b2dfe79538bec48cc4a8aecb377
- TLSH
  T150F02069CA106DA704B937BAC63AC182FB30573B00041D92B9FC080C2F77DB22212F89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  Xeno-v1.3.55/api-ms-win-crt-convert-l1-1-0.dll
- Size 15KB
- SHA256 94b6e91b93c2202dabd659bff294bee87c22897a30a6b4930b49051c2fb502dc
- MD5 c8dbf0ca88facfe87899168a7f7db52c
- SHA1 e2cf163ad067b5d3b19908a71ed393711f66cd09
- SHA512 e85c738f5d5a0ae6c3ef75a082712cb3cf2feae4560d316cb110e4eaf3a97d6058d5374da2a5edde39c3114f9aff8a027cbdff8cf49be2425943bac09c39e70b
- SSDEEP 192:w89M0wd8dc9cy1WphWWD1S8f4DBQABJt9o0Z5uE7Mqnajcno:wt0wd8xy1WphWWD1IDBRJtO0zuOMlAo
- TLSH
  T1A762A49366E43F15EA9F277221FEDBD72A391B81255043B8C607E54C3882782BD97C0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Xeno-v1.3.55/api-ms-win-crt-environment-l1-1-0.dll
- Size 18KB
- SHA256 f7c6c7ea22edd2f8bd07aa5b33cbce862ef1dcdc2226eb130e0018e02ff91dc1
- MD5 c712515d052a385991d30b9c6afc767f
- SHA1 9a4818897251cacb7fe1c6fe1be3e854985186ad
- SHA512 b7d1e22a169c3869aa7c7c749925a031e8bdd94c2531c6ffe9dae3b3cd9a2ee1409ca26824c4e720be859de3d4b2af637dd60308c023b4774d47afe13284dcd2
- SSDEEP 192:sfW1hWiQcvHCjdks/nGfe4pBjSY6Na3sAW5RKTt3E2sVWQ4GWIjcyqnaj/6g6dqd:sfW1hWPQim0GftpBjzim3StltFpn
- TLSH
  T1F2822BC69ABC9543F9C3AE7052B8EA877D3DDBC31D20812605A9F5982CC73D1EB1092D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Xeno-v1.3.55/api-ms-win-crt-filesystem-l1-1-0.dll
- Size 13KB
- SHA256 51541ec6684b43157a85ea46a42ebed4555be06bed0d0d07ff3ea6377301318d
- MD5 42a2a95f1bb940d01f55eb1674a81fe2
- SHA1 f982f3bbb4dc3aaaba8df098d1b395846f7cba08
- SHA512 de9a7a1a6a45e2f76105eaeafcc3c29adbff142dcf2586e147417045b897a9dcddec5e1b97acfc5d3fc9c8e3a508dbc3f607bf3df20a7435e74436f94cb056b6
- SSDEEP 192:zt/PGnWlC0i5C9WphWAeD1S8f4DBQABJJ2yy2D8KN3qnajV2MVorr:VunWm5C9WphWbD1IDBRJJkt2lxnorr
- TLSH
  T18852F78347E47E02EAA72B3112FDDBDB3F3D5781185247668006A52839E73C1BF1659D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Xeno-v1.3.55/api-ms-win-crt-heap-l1-1-0.dll
- Size 12KB
- SHA256 80139e4caa379d87b1d1dafc23ace71d2b330368115f6314140d4ae59c2a78e8
- MD5 98da186fd7d7873c164a51c5d7b77f1a
- SHA1 725a8b8fdfbe6a1e85674f4b2a7c0dd08411e00b
- SHA512 587b49a24cc59d4dcb62b59f379d1c9010196a6551cfc99ffdd931eeb0172618f020863191e530d65ad198e57063c57ba6f70bcf80591304243268ea5513f806
- SSDEEP 192:DaY17aFBRQWphWp+QD1S8f4DBQABJtAa46ArNc4qnajr7PQW:7VWphWFD1IDBRJtAa54lrPQW
- TLSH
  T1BB421CC387B85903E7637F7026A9D68B3D3E67C66D6085668057F2A52C833C5EF0162E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Xeno-v1.3.55/api-ms-win-crt-locale-l1-1-0.dll
- Size 11KB
- SHA256 7bb8644e565ad4bcfd890f9044bccb4d99953a740e9a500b1f820b2fdc3fc240
- MD5 ff48b107b2449a647c64baabd49408a1
- SHA1 efb868ba125d9ff08474f02b9483d74c36a13cee
- SHA512 4da2e4b727e7f31f8bffd680453c451b444bdf217c15cb36e353f8bb5ecb6c6481caa7d848558c7d94cfc2d1bc3551ace11e85ffc8ec7a7b570a59c294ea0216
- SSDEEP 192:JWphWzDD1S8f4DBQABJtySO5M8xOSqnaj3yAY9:JWphWHD1IDBRJtyICTluAY9
- TLSH
  T141422B868BB82803E6927F7006A9D6877D3E63C31811856A5087F6983C433DDEF01B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32