76717bae1b0eb9c1722a3eeae61195edaa827d619efd0788438a831a9369bc41

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
900s
max time network
480s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 00:52

Target
resources/public/Xeno.dll
Size 2.1MB
Sample260805-a79fmsgq6w
SHA256 76717bae1b0eb9c1722a3eeae61195edaa827d619efd0788438a831a9369bc41
MD5 35e60c9e5a185920c285d9829199b292
SHA1 3f21b3528e977427f4acf5518bef34f0559ef386
SHA512 0432e7bfc14fd6fe610d768e6b7a8a430fcd351a783552d34dabd2ed444d16803e95579c81edc2324530eb60090c8949a509e7278f3873469600076cf66b162f
SSDEEP 49152:24303kli5j76aKsnOZ8RNcdOgjL8MBfVgHFuC3N:2vd+BCQC9
TLSH
T1A9A59F13A19900ECD077D1F8CA5B5A13E7727C490325B6EB12F0BA652F27AE58E3E705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6136	rundll32.exe
6136	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\resources\public\Xeno.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6136

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5928

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1448