General

  • Target
    Xeno-v1.3.55.zip
  • Size 6.8MB
  • Sample260808-an6weayydw
  • SHA256 1c289425268302a153c03e144c0ee13fcbbac0081780f68db6a0a793a7adb658
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Xeno-v1.3.55/Microsoft.Web.WebView2.Core.dll
    • Size 557KB
    • SHA256 11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/Microsoft.Web.WebView2.WinForms.dll
    • Size 37KB
    • SHA256 5696366f7458da940cc986dc5d3d4549a2368512acd769014ecbb07b47bd88b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/Microsoft.Web.WebView2.Wpf.dll
    • Size 50KB
    • SHA256 b628d6133bf57b7482a49aa158e45b078df73ee7d33137ac1336d24ac67ed1b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/Newtonsoft.Json.dll
    • Size 695KB
    • SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/WebView2Loader.dll
    • Size 161KB
    • SHA256 465a7ddfb3a0da4c3965daf2ad6ac7548513f42329b58aebc337311c10ea0a6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/Xeno.dll
    • Size 2.3MB
    • SHA256 7125b2f8f8753ad2770fec80ef0372a4954282ab1b9011460b9eee62715da6a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/Xeno.exe
    • Size 164KB
    • SHA256 2a005904a24a22d69a5629669b2781b41a0d004f625238d971fc5adb19e91439
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Target
      Xeno-v1.3.55/XenoUI.dll
    • Size 145KB
    • SHA256 0f0b1c9d186e46dbba795176287c07e874b3222b0a98ebc8a32525afc60d106e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-convert-l1-1-0.dll
    • Size 15KB
    • SHA256 94b6e91b93c2202dabd659bff294bee87c22897a30a6b4930b49051c2fb502dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-environment-l1-1-0.dll
    • Size 18KB
    • SHA256 f7c6c7ea22edd2f8bd07aa5b33cbce862ef1dcdc2226eb130e0018e02ff91dc1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-filesystem-l1-1-0.dll
    • Size 13KB
    • SHA256 51541ec6684b43157a85ea46a42ebed4555be06bed0d0d07ff3ea6377301318d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-heap-l1-1-0.dll
    • Size 12KB
    • SHA256 80139e4caa379d87b1d1dafc23ace71d2b330368115f6314140d4ae59c2a78e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-locale-l1-1-0.dll
    • Size 11KB
    • SHA256 7bb8644e565ad4bcfd890f9044bccb4d99953a740e9a500b1f820b2fdc3fc240
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-math-l1-1-0.dll
    • Size 20KB
    • SHA256 8a7bff1c918539a75c25568db25933d653c003e016fd7791a37186b42bbb7c20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-runtime-l1-1-0.dll
    • Size 16KB
    • SHA256 07382c0d91dad2bb6ba8bd06ea02f12c57abf7c4e5a70672e9f2954d09a4ffd4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-stdio-l1-1-0.dll
    • Size 17KB
    • SHA256 2a466648affd3d51b944f563bb65046a3da91006a0d90fb2c0b123487a1fc1b3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-string-l1-1-0.dll
    • Size 18KB
    • SHA256 bf4ea10be1b64c442ac0ccf4bdf69f6703467176a27e9e14a488d26448a6e179
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-time-l1-1-0.dll
    • Size 13KB
    • SHA256 b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/api-ms-win-crt-utility-l1-1-0.dll
    • Size 18KB
    • SHA256 984306a3547be2f48483d68d0466b21dda9db4be304bedc9ffdb953c26cac5a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/concrt140.dll
    • Size 316KB
    • SHA256 2405355f0a58067b258f8df33c327e3a3d716eaac5a3a5aebb757842d85bd376
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Xeno-v1.3.55/editor/index.html
    • Size 164KB
    • SHA256 43e332faef4019a95d3b72205da7ce72bc4ccd25f53399352b68442f0b55dad2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      Xeno-v1.3.55/editor/vs/base/worker/workerMain.js
    • Size 133KB
    • SHA256 e90d1a8f116fa74431117a3ad78dde16dde060a4bf7528dfe3d5a3ad6156504b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

discovery
Score
8/10

behavioral13

discoverypersistenceransomware
Score
8/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

discovery
Score
6/10

behavioral30

discovery
Score
6/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10