4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0

General

Target
Xeno-v1.3.60.exe
Size 84.8MB
Sample260809-16egzsem2s
SHA256 4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0
MD5 b857711f0516ecbd54da4f4c15980d07
SHA1 d049c39512cca37ad4a0ba798527973cae2f18dd
SHA512 1cea7234e297dbe20168122d531fcb5bd08ddc8892c4739e5ea7423239268a97b931ee5199fcecc25fe9be67dab73d411216a65122d9d2cae9ac75f6d01636d8
SSDEEP 1572864:3z7mGUFQi28oCKlR+lk9suop3T99fwXGVuRiXzO/eGbNQZoJs:3z/UurlR99poNPIXGIRMO//bNrs
TLSH
T1B3183390ACCD31AECCACD5F4D860B2052079DE0F99546A23203E7BAF3DB74664DD6963
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Xeno-v1.3.60.exe
- Size 84.8MB
- SHA256 4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0
- MD5 b857711f0516ecbd54da4f4c15980d07
- SHA1 d049c39512cca37ad4a0ba798527973cae2f18dd
- SHA512 1cea7234e297dbe20168122d531fcb5bd08ddc8892c4739e5ea7423239268a97b931ee5199fcecc25fe9be67dab73d411216a65122d9d2cae9ac75f6d01636d8
- SSDEEP 1572864:3z7mGUFQi28oCKlR+lk9suop3T99fwXGVuRiXzO/eGbNQZoJs:3z/UurlR99poNPIXGIRMO//bNrs
- TLSH
  T1B3183390ACCD31AECCACD5F4D860B2052079DE0F99546A23203E7BAF3DB74664DD6963
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  resources/public/index.html
- Size 383B
- SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
- MD5 e582b9106fb430459c697d4c5a519c25
- SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
- SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
- TLSH
  T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6