0d9dec7d2a992fbf39a73355af994129e5dd5556e48a9bf84fff3d83960f118d

General

Target
XENO-HUB Setup 0.8.0.7z
Size 134.8MB
Sample260813-bhrpzayeqf
SHA256 0d9dec7d2a992fbf39a73355af994129e5dd5556e48a9bf84fff3d83960f118d
MD5 9069a2e9dc306ccb0f2684d7dd03cbab
SHA1 e1a575df1d0a279bebf93ed9133623f9c7074127
SHA512 1fd3f97660ad7b48212af3cab136bebf4687cc56afc36421e2b931b7f22c62c89a0a72a58dd365ca15bc1723b2798d01782a25205bc1c1e5f3c2aa56d4c8dbac
SSDEEP 3145728:7E8qJbrRw7FLqgbOVFEYjiPtsRt2ENLzwDGSNf/TxnAKJwI:7fqJikrE432udK3J
TLSH
T1F2683314340BD8F7C3E792F376852312E463A1E927B46CCA01ADB5A5B5A00EFF5725AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  XENO-HUB Setup 0.8.0.exe
- Size 136.7MB
- SHA256 4d3a455428f18796e4e64ce112adaf1d18e5803f690983a2ce2ca4485328c008
- MD5 de9793dae76037f68c9b2363ffac55ab
- SHA1 9860926438e2e6fcdebe334c36e4302866905ca2
- SHA512 2b5a0ab1a43e6e243736cb4daf4c3d745d373f41be18318aaafc9ef885fddbb6ac2b62bcf0a240fdaadac17f38f1db1535c3829e372a507849e49ec261a89d27
- SSDEEP 3145728:uQ+JscLtQE+NghrHob3ssj/hwe/oa3UBrcVqj9MEt3x1mujcU3:RuscD6rjZXUGuBph
- TLSH
  T17A6833D0340AD4B7C1A653B2E6F11332D0237EE9367C688D11A9B1AF767D1DAE1235B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  XENO-HUB.exe
- Size 180.4MB
- SHA256 e6f026253fa1e4bed15c3e36d8afd01c017e1df0f64169fde56f20471a0fd4f5
- MD5 80d135b7a460e3a1edf3c3404ddd7864
- SHA1 590b539d6c8c01de1240c08434ef25e488e58d00
- SHA512 5094cf24cb37406700864c9d83191a62dcdac8cc607fb2c2147f1c4ef9073d90a59246274620a595f3732155eeae351adcaeecb5911f24202bb8e5a6347fc0d6
- SSDEEP 1572864:vH0f0gqxb0WBFh/LVO9dyKcRmAswCXj5EtV4ga5h0q2ZOADpAyK5/Y3P8kbVr+qI:Msok+hK7
- TLSH
  T1D7988C03F39A40D9E01DD1B58B979633EAB1B8854328A2DF275407562F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral2