eb4752a957e685425d0f72a07e6e1cccfafd7a932e892b0aefb4aed753a5b6d6

Sharing

Copy URL Twitter E-mail

General

Target
Xeno-v1.3.60.zip
Size 51.4MB
Sample260814-dtgegstdqg
SHA256 eb4752a957e685425d0f72a07e6e1cccfafd7a932e892b0aefb4aed753a5b6d6
MD5 a39038cf1d944401968b4e81d9b9bd64
SHA1 7b9ce272bdbc0a0a8d34396cf91e5cce10562087
SHA512 e166eff194927beb5439f58e66a13a2aff94465598e569104df2bf9a70270dad2042bdb43fde49ee380bf971719e4eb1176303c1ee077d63ffd3d8ff8fed62b0
SSDEEP 1572864:9EjynBAAZPhOPyDC58jVXAHrlWwTOlMDkX78SbR:CRCPhggM8jNAZWwT0KkXLF
TLSH
T19FC7335AD58D0849CEABBFF800589EC4D3FF645B2943800F69A503157D2F7A135BBB8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Xeno-v1.3.60/Microsoft.Web.WebView2.Core.dll
- Size 557KB
- SHA256 11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
- MD5 b037ca44fd19b8eedb6d5b9de3e48469
- SHA1 1f328389c62cf673b3de97e1869c139d2543494e
- SHA512 fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
- SSDEEP 12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
- TLSH
  T15BC4402123FD8A1AE6F63BB5A57407709BFAFC967979D39D0598251C0D72B408AE0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Xeno-v1.3.60/Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 5696366f7458da940cc986dc5d3d4549a2368512acd769014ecbb07b47bd88b4
- MD5 8153423918c8cbf54b44acec01f1d6c2
- SHA1 f0c3c5412b809725e6d4809230adb15cc7d83ad2
- SHA512 f3dc771e37c71479d332142ec5a9c5c3f39ca71937f595a0f7482ae5aaaafd92e932efc9b0363d4511d547f3c8b2e0497ebbf8356e7d07fc344f4e5715b0ee87
- SSDEEP 768:1sjCEEHJ9l0EeFZ2sxIHzttZDgcEST3p4Jjrjh2jJ+SG2au8vxJKia5/Zi/ZGQKk:wCEB15azttZDgcEST3p4JjrjaJ+SG2a/
- TLSH
  T1B4034B0483DCC617D6EB6FB8A5B491620B7ABF837960D36D1C84F5E90DB37A0891076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Xeno-v1.3.60/Microsoft.Web.WebView2.Wpf.dll
- Size 50KB
- SHA256 b628d6133bf57b7482a49aa158e45b078df73ee7d33137ac1336d24ac67ed1b4
- MD5 4a292c5c2abf1aab91dee8eecafe0ab6
- SHA1 369e788108e5fb0608a803fa2e5a06690b4464b5
- SHA512 ca22adfff9789730e4c02343e320d80b8466cfc5a15f662cefe376b7ee29dea571004c1c26cd3f50c0d24e646f2b36b53fa86835678f46f335d65eec52431cde
- SSDEEP 1536:gpGhWMhWLF9jwKi8LDP/ryEH0GBy4JjrD1aah/UaOzk6hKKa5/Bi/IGCv0Z0T6Cc:taBi8LDP/b0GBy4JjrD1aah/UaOzk6hz
- TLSH
  T12E33398047AD8533D6EF4FB450B481214B79BE83B9B1E78A1DC8F4E91DA77800A543AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Xeno-v1.3.60/Newtonsoft.Json.dll
- Size 695KB
- SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
- MD5 adf3e3eecde20b7c9661e9c47106a14a
- SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
- SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
- SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
- TLSH
  T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Xeno-v1.3.60/WebView2Loader.dll
- Size 161KB
- SHA256 465a7ddfb3a0da4c3965daf2ad6ac7548513f42329b58aebc337311c10ea0a6f
- MD5 c5f0c46e91f354c58ecec864614157d7
- SHA1 cb6f85c0b716b4fc3810deb3eb9053beb07e803c
- SHA512 287756078aa08130907bd8601b957e9e006cef9f5c6765df25cfaa64ddd0fff7d92ffa11f10a00a4028687f3220efda8c64008dbcf205bedae5da296e3896e91
- SSDEEP 3072:7evoTTlTRTyiuPThTNTKm81SbbMYSPLNsknZiZ2HZ5AaliiT88FEtJ57dXSvlCW:HTlTRTyiuPThTNTKmFQdhsknZiMHfEti
- TLSH
  T120F36C5B72E4407BE16B8274C9A34A11E77778110B60ABEF03A447791F237D4AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Xeno-v1.3.60/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.84/adblock_snippet.js
- Size 2KB
- SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
- MD5 f5c93c471485f4b9ab45260518c30267
- SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
- SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
- TLSH
  T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  Xeno-v1.3.60/XenoUI.dll
- Size 145KB
- SHA256 df0340b85421ca26bb402298a0be16b256717ab5a50bc5fced8def1775935b28
- MD5 ae10fbd713d66bb20ee8b62195acdfc3
- SHA1 361d03203b859be7bcf38442338b550972bffefb
- SHA512 098f81334f3933c20a75be58b150516775e6116e91d47a39f45eb55aaf7af20871cf39b74accf1279a60e2c77682e082e32e185a23c9d154c97c04dd837962c0
- SSDEEP 3072:g1gdAO0a8Uwz2TbyG3BOZB7Pby6SgV9Sj0LC55dVPOdXmqTc7:TAnaCz2HyGkFby6p9Sj0Uh2dWb7
- TLSH
  T1BEE3AF41376CCA12CABF0FBD64B152955A71BE17A5A3E70E14CC349C6CF738286523AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Xeno-v1.3.60/api-ms-win-crt-convert-l1-1-0.dll
- Size 15KB
- SHA256 94b6e91b93c2202dabd659bff294bee87c22897a30a6b4930b49051c2fb502dc
- MD5 c8dbf0ca88facfe87899168a7f7db52c
- SHA1 e2cf163ad067b5d3b19908a71ed393711f66cd09
- SHA512 e85c738f5d5a0ae6c3ef75a082712cb3cf2feae4560d316cb110e4eaf3a97d6058d5374da2a5edde39c3114f9aff8a027cbdff8cf49be2425943bac09c39e70b
- SSDEEP 192:w89M0wd8dc9cy1WphWWD1S8f4DBQABJt9o0Z5uE7Mqnajcno:wt0wd8xy1WphWWD1IDBRJtO0zuOMlAo
- TLSH
  T1A762A49366E43F15EA9F277221FEDBD72A391B81255043B8C607E54C3882782BD97C0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Xeno-v1.3.60/api-ms-win-crt-environment-l1-1-0.dll
- Size 18KB
- SHA256 f7c6c7ea22edd2f8bd07aa5b33cbce862ef1dcdc2226eb130e0018e02ff91dc1
- MD5 c712515d052a385991d30b9c6afc767f
- SHA1 9a4818897251cacb7fe1c6fe1be3e854985186ad
- SHA512 b7d1e22a169c3869aa7c7c749925a031e8bdd94c2531c6ffe9dae3b3cd9a2ee1409ca26824c4e720be859de3d4b2af637dd60308c023b4774d47afe13284dcd2
- SSDEEP 192:sfW1hWiQcvHCjdks/nGfe4pBjSY6Na3sAW5RKTt3E2sVWQ4GWIjcyqnaj/6g6dqd:sfW1hWPQim0GftpBjzim3StltFpn
- TLSH
  T1F2822BC69ABC9543F9C3AE7052B8EA877D3DDBC31D20812605A9F5982CC73D1EB1092D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Xeno-v1.3.60/api-ms-win-crt-filesystem-l1-1-0.dll
- Size 13KB
- SHA256 51541ec6684b43157a85ea46a42ebed4555be06bed0d0d07ff3ea6377301318d
- MD5 42a2a95f1bb940d01f55eb1674a81fe2
- SHA1 f982f3bbb4dc3aaaba8df098d1b395846f7cba08
- SHA512 de9a7a1a6a45e2f76105eaeafcc3c29adbff142dcf2586e147417045b897a9dcddec5e1b97acfc5d3fc9c8e3a508dbc3f607bf3df20a7435e74436f94cb056b6
- SSDEEP 192:zt/PGnWlC0i5C9WphWAeD1S8f4DBQABJJ2yy2D8KN3qnajV2MVorr:VunWm5C9WphWbD1IDBRJJkt2lxnorr
- TLSH
  T18852F78347E47E02EAA72B3112FDDBDB3F3D5781185247668006A52839E73C1BF1659D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Xeno-v1.3.60/api-ms-win-crt-heap-l1-1-0.dll
- Size 12KB
- SHA256 80139e4caa379d87b1d1dafc23ace71d2b330368115f6314140d4ae59c2a78e8
- MD5 98da186fd7d7873c164a51c5d7b77f1a
- SHA1 725a8b8fdfbe6a1e85674f4b2a7c0dd08411e00b
- SHA512 587b49a24cc59d4dcb62b59f379d1c9010196a6551cfc99ffdd931eeb0172618f020863191e530d65ad198e57063c57ba6f70bcf80591304243268ea5513f806
- SSDEEP 192:DaY17aFBRQWphWp+QD1S8f4DBQABJtAa46ArNc4qnajr7PQW:7VWphWFD1IDBRJtAa54lrPQW
- TLSH
  T1BB421CC387B85903E7637F7026A9D68B3D3E67C66D6085668057F2A52C833C5EF0162E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Xeno-v1.3.60/api-ms-win-crt-locale-l1-1-0.dll
- Size 11KB
- SHA256 7bb8644e565ad4bcfd890f9044bccb4d99953a740e9a500b1f820b2fdc3fc240
- MD5 ff48b107b2449a647c64baabd49408a1
- SHA1 efb868ba125d9ff08474f02b9483d74c36a13cee
- SHA512 4da2e4b727e7f31f8bffd680453c451b444bdf217c15cb36e353f8bb5ecb6c6481caa7d848558c7d94cfc2d1bc3551ace11e85ffc8ec7a7b570a59c294ea0216
- SSDEEP 192:JWphWzDD1S8f4DBQABJtySO5M8xOSqnaj3yAY9:JWphWHD1IDBRJtyICTluAY9
- TLSH
  T141422B868BB82803E6927F7006A9D6877D3E63C31811856A5087F6983C433DDEF01B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Xeno-v1.3.60/api-ms-win-crt-math-l1-1-0.dll
- Size 20KB
- SHA256 8a7bff1c918539a75c25568db25933d653c003e016fd7791a37186b42bbb7c20
- MD5 e10e077bb06209aedd0d0d378c758f73
- SHA1 97a9053a311280678f8ef65dc4e25975c41bd4ee
- SHA512 571c1fc4192320bd967b603e6cda917a62f4720eb4dcd557ec2913d2558c0cfe68f936198f5809934aaa3a1d6049e8e918eb0e638a7244df5c71ef0c78843191
- SSDEEP 384:rJI2M4Oe59Ckb1hgmLZWphW1D1IDBRJJo95DKlxT1xpN:ri2Mq59Bb1jEkI1PU5Dmv
- TLSH
  T1F592B68749DCFF67D28F17B701F08BCE6A381AA254E1B6B4C81B918934927C47E4394D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Xeno-v1.3.60/api-ms-win-crt-runtime-l1-1-0.dll
- Size 16KB
- SHA256 07382c0d91dad2bb6ba8bd06ea02f12c57abf7c4e5a70672e9f2954d09a4ffd4
- MD5 f91e1ff896b5616919ac97c7095c513e
- SHA1 4ec6eed0bac5a8801db10238c7b3a5d35a87be67
- SHA512 6448d6cdfde11e1805b6d381111ea062f681807c9dc54ae890305f287b13b6fb57ef3f4d3b909e56b81c99830c086b5702b46ba0f93e695fce2b87b32fa4b26a
- SSDEEP 192:uaajPrpJhhf4AN5/KipWphWAzD1S8f4DBQABJJLQ67T0q11qnajVtPx5g:ulbr7fWphWiD1IDBRJJL7Tplxb5g
- TLSH
  T1F272E7834AE87F27E68B3B7316F9D7D72A36638629104179C857E1D938C3781BD0721A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Xeno-v1.3.60/api-ms-win-crt-stdio-l1-1-0.dll
- Size 17KB
- SHA256 2a466648affd3d51b944f563bb65046a3da91006a0d90fb2c0b123487a1fc1b3
- MD5 429c26ed27a026442f89c95ff16ce8c2
- SHA1 69ed09faae00a980c296546c9b5e6a8d5f978439
- SHA512 04641164d9e1eb3183db0c406583626011dfe2b2574551c0ac466ebf44165afcd7d8faf356b8268b4fc9a54db20de010a4e4293594ad2e605950aea65636f4e5
- SSDEEP 192:BpPLNPjFuWYFxEpah7WphWRD1S8f4DBQABJ+SiLuEbNEdiqnajVCpEbOg4:B19OFVh7WphWRD1IDBRJ5iLbnlxkEf
- TLSH
  T16082C58385EC3F46D28797331AFAEBEB5635538328147278C407E9943ACA389BE0755D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Xeno-v1.3.60/api-ms-win-crt-string-l1-1-0.dll
- Size 18KB
- SHA256 bf4ea10be1b64c442ac0ccf4bdf69f6703467176a27e9e14a488d26448a6e179
- MD5 0f593e50be4715aa8e1f6eb39434edd5
- SHA1 1117709f577278717c34365ce879bcd7c956069b
- SHA512 487dcbf7b7f18d62606cb2f05c8feff07e6ecda42e643f5919c6edda66cdb3b8cc393b0d260374f06c10cf54082410fc9f02bd87cc50866bc0c28b0bcec3e658
- SSDEEP 384:fFvU4x0C5yguNvZ5VQgx3SbwA7yMVIkFGl3WphW+D1IDBRJ5YBMOnlxkEx:p5yguNvZ5VQgx3SbwA71IkFxVI1PKJ
- TLSH
  T11982B58346F83F45CA8F57B319FAC7C72A384B4625411375C467A58C3882B96BE6BA0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Xeno-v1.3.60/api-ms-win-crt-time-l1-1-0.dll
- Size 13KB
- SHA256 b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0
- MD5 1d48a3189a55b632798f0e859628b0fb
- SHA1 61569a8e4f37adc353986d83efc90dc043cdc673
- SHA512 47f329102b703bfbb1ebaeb5203d1c8404a0c912019193c93d150a95bb0c5ba8dc101ac56d3283285f9f91239fc64a66a5357afe428a919b0be7194bada1f64f
- SSDEEP 192:ENDCWthWHWf9BvVVWQ4mWG5xqcVT/gqnajKsrC/V:TWthW6N/xqc1IlGsrC/V
- TLSH
  T16A52F98386E4AA0BFAC71B7112FDD7D77B3953C2298061768117D4A83A83384FE5396D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Xeno-v1.3.60/api-ms-win-crt-utility-l1-1-0.dll
- Size 18KB
- SHA256 984306a3547be2f48483d68d0466b21dda9db4be304bedc9ffdb953c26cac5a1
- MD5 54f27114eb0fda1588362bb6b5567979
- SHA1 eaa07829d012206ac55fb1af5cc6a35f341d22be
- SHA512 18d2bdce558655f2088918241efdf9297dfe4a14a5d8d9c5be539334ae26a933b35543c9071cedada5a1bb7c2b20238e9d012e64eb5bbf24d0f6b0b726c0329d
- SSDEEP 384:RfVW1hWfFm0GftpBjaDRm3SY6vlgCohaQ:RfsQViklwHj
- TLSH
  T1E58219868EBCA583EAC36E7053E8DBC77D3D97C35D20856140AAF1982C877E1AF1461D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Xeno-v1.3.60/autoexec.lnk
- Size 1KB
- SHA256 e66ccf8e354862d53215848121cf547600e78800690f78e9b4ac258aad60b501
- MD5 6d7f14b813e086a242ef57661e834fd1
- SHA1 d164a660dd7740dc06e196647845c7d3285f1a37
- SHA512 45dbc0335ef82dbbf18e5065bb12a19c4fbd95ae9e41479f8d302e7be57d0475e64455c66427d1c189db1c094c17dcdb7227e168b67190931cf9a7d481149d6d
- TLSH
  T17011DC6A0AE24E71D335C1BA46FB2515DF23BD56E3909F0B0000A38E0A62B626C25E1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  Xeno-v1.3.60/concrt140.dll
- Size 316KB
- SHA256 2405355f0a58067b258f8df33c327e3a3d716eaac5a3a5aebb757842d85bd376
- MD5 5fe9a647921ded8a2fad92deb9ec4ab2
- SHA1 1ce87fac4c22aae82a81ddb26952c074b744e78d
- SHA512 11fe4c0519cb1df73695ce38b5fdea2a563de565116a47ff0032d5a68b8c51fe732ad66738a7167e56d79193c60af9204a7ee0beae8ff8bb75abd0b484c2d764
- SSDEEP 6144:jfjSd54rw5k9cZW1Cbfpri5/ww8VRj7nWzg/p8Wcz:DOP4rwK9c0ILqzocz
- TLSH
  T16C64398A76140CE6F96BE039C553851BE6F2BC416352D3CB0264839E6F637D1E93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Xeno-v1.3.60/editor/index.html
- Size 164KB
- SHA256 43e332faef4019a95d3b72205da7ce72bc4ccd25f53399352b68442f0b55dad2
- MD5 b33eb96a570d0cdf6ded11ff199d0de3
- SHA1 47c7c58cefda42ca2a5ec53af727d34aa0663136
- SHA512 409771d5941dc934b46c3a1d906bbc352bb9c1684c4bc585d7d884acc8d8ea93661637cbf047d02b96a17ab978419f8c116097226b89898007eaf3a8e7d976a5
- SSDEEP 3072:Nk4J09UmmJv8kBpZaFD48VOAGUWYPjDZlLJbRBiPEP8yKUz2Ojmjr8zM3KP7pbl8:64J09BA3pZaFD48VOAGUWYPjdlLJbRBW
- TLSH
  T1E7F3F19AF1122D5226C79230619BBE297FF19490BE766B424B9CF3201091FDF116FBB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral21
- Target
  Xeno-v1.3.60/editor/vs/base/worker/workerMain.js
- Size 133KB
- SHA256 e90d1a8f116fa74431117a3ad78dde16dde060a4bf7528dfe3d5a3ad6156504b
- MD5 d0ac5294c58e523cddf25bc6d785fa48
- SHA1 1b3661b6db36f1b14fd80dc9a739bfc69c68dfe5
- SHA512 fea07a1ea5d29a3b4c614248655f4d1ddd94c10c6a6b5c8b428a8b4c0cbec7e7492fa0665c5001e65ce167240ffdfc5ac2c2ed14da3d6f508ae8d8b3c8e8eebb
- SSDEEP 3072:bzjH/zYJc5c/7tMLrJ78II4F9N8+em5W+:XjH/zYJc5c/76LrJ78I7BL
- TLSH
  T1D4D3C5CD72A5B4125397A1B1507F110FF33A296A980D44BCF365C8DD2DBA48A617BF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Xeno-v1.3.60/editor/vs/basic-languages/lua/lua.js
- Size 4KB
- SHA256 ac729efb3164f48d6b08f74d4b15060c126a30d40fb4cd4fc9cc94f2e19bd7c7
- MD5 eebda1fdd970433750c115eae2f03865
- SHA1 3f1a1cddb99dead013eac825eb418241656d4bf0
- SHA512 8b188f3ae73a14a9318dce9761312d9dd2360ab00ee36e83ca6b74288a109c91770954db7537fd84a76707a1e79528fffc97f3a718bcd924545b469a1363c9cb
- SSDEEP 96:HDGAW6FJJJkCO8evcIWtdrvrg+1/sLMiWAOKjLobLMzD:BWCDqC20IWtZD92pzOKvomD
- TLSH
  T1CEA182C6FDCCA35E8BFAF7C4CAF1E976F58DC231C02550BAFAD05508060CA89965E625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Xeno-v1.3.60/msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Xeno-v1.3.60/msvcp140_1.dll
- Size 35KB
- SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
- MD5 2a214cb2f0f9473e7765ee3b8db8651e
- SHA1 9ce5c3d6c7d94b175f136f552af8771dca6147b3
- SHA512 ea9a759babdec5818fa1e430d1cb453cac762cfaa8f934e01d7182100f66cae21527962696f5bd963fcb0fba2c0f38bf4028e75f89e9e599ddee008021646a33
- SSDEEP 384:3jJ2J9VQH+qNy09dmFWcS5gW7YZ1gr4iSt+e92xS+R9zWd/I1IHRN7SUl8BR9zTr:d8QH+qNy0PmgogU9v2ci9zeHSn9z3
- TLSH
  T1C3F25D86F7248442EC674970C699EE837C3DB3D25B50969B17A5F61C0DA33C1FA34A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Xeno-v1.3.60/msvcrt.dll
- Size 683KB
- SHA256 84425efa675012d33433c4c1c43836811d74be8b3e53a04947566f19356803d3
- MD5 3c16dc3a8bca4e7b1e9cd1413301bb54
- SHA1 64953c05cbb41f5297808069b9c45d6ba33f633b
- SHA512 6b7514a07231604d49ece1cc532fec748902705e026926059bcb6bba6c9eaf60cd3cf3f1d3fafe62a468cd3b3f53d574f25dea1b15f666226849afb2b87735c5
- SSDEEP 12288:USJWl7OB9MB+kuYHWsnx53yozyg2GqJj7GyopCoAQRmVyIZN/eo:xW8QHldnjz+G+7GyopCumVyIZ1X
- TLSH
  T16BE49D6573A90AF5D87BE13EC9825226F672B819137483DB02A14A685F33BF5563F303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Xeno-v1.3.60/scripts.lnk
- Size 1KB
- SHA256 095d1a24a3aa3eaf80db86e919cf56e960a59649b6772fb6025dae2d9e68f76d
- MD5 228b3d5a6639133f57017254feea0bb3
- SHA1 b057023d3d3fc3f61836f96185c7ce06095d0553
- SHA512 3f25a3b2b310c82c60ca94c323339cdbfd9a0ef4b712403f07a2b4d64de0f5ed82196a156bbbc0470a5f372eebe4a97b5b8925f16434485dca882bf11cdb3386
- TLSH
  T1911100AA9AD64E71D2B180BA55F72216DF25BC5DDB81EF170480838C0D61B909C61F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  Xeno-v1.3.60/ucrtbase.dll
- Size 1011KB
- SHA256 6238cbfe9f57c142b75e153c399c478d492252fda8cb40ee539c2dcb0f2eb232
- MD5 849959a003fa63c5a42ae87929fcd18b
- SHA1 d1b80b3265e31a2b5d8d7da6183146bbd5fb791b
- SHA512 64958dabdb94d21b59254c2f074db5d51e914ddbc8437452115dff369b0c134e50462c3fdbbc14b6fa809a6ee19ab2fb83d654061601cc175cddcb7d74778e09
- SSDEEP 24576:EsKxVJ/pRRK0Y/9fCrl4NbpjONcncXEomxvSZX0yp49C:lKxDPHQCrlQBXxw
- TLSH
  T10D25AF64FA5D0EA9D57BE13DC51B560FD572380207608ACF03E64BB96E2BBD91637320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Xeno-v1.3.60/vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Xeno-v1.3.60/vcruntime140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Xeno-v1.3.60/workspace.lnk
- Size 1KB
- SHA256 b345e13535fa6cb38108d6d8323ed54cbca9cd9aef98f73568aaafc801fa5a49
- MD5 d21b9312b2572e67a561decbcfa626fe
- SHA1 84a348e22694e681e7a78b6121a472566cbf7795
- SHA512 252e3d21dce587ee86abd2739b3f1d086b47704dadd3cc3097195a1512f390136c275e69aac8125543f623aaa59426520c06e51ac5d9df7ca6618f9edcec0c37
- TLSH
  T1A511DC3A1AD64E32D33280BA5AE73606DB35BC69EB80CF071040538D0921F90A861F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  Xeno-v1.3.60/zlib1.dll
- Size 88KB
- SHA256 f6b58fdde3bfef2c25c7254fadfed12d86d81c4a5c962262715868c48063fc76
- MD5 68cf6f98cb8b227814a59ff3f909a0af
- SHA1 0383a4d7a74417d3ec90526e61b7637256e0bb57
- SHA512 b59f9eeededd1f76f048b57ae753f79227aead32006fc649532a9bae3f441515bab85338d25b26e5002c54c65d661c0c3048f5c3c1ded6274638ee950afb4744
- SSDEEP 1536:QvkS6XmTzqbKxfXOTBpp/foyUaDmjGI23aIOcIOZhhkxBJNJ5:PdXozwBppnqG3oSZfkxBJNJ5
- TLSH
  T1C5936B4AAAB412A5D6F78178D8D207ADC331701407A44BDF9648A7691F23BE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32