6e5ddbf5d1a9f963cf0bc9bd459dcff983e95704abd5cb1c582365f3eadb2ebc | Triage™

Login
Reports

Overview

overview

Static

static

Xeno-v1.3.60/Xeno.exe

windows10-2004-x64

Xeno-v1.3.60/Xeno.exe

windows11-ltsc_2024-x64

Xeno-v1.3....UI.exe

windows10-2004-x64

1

Xeno-v1.3....UI.exe

windows11-ltsc_2024-x64

1

Xeno-v1.3....x.html

windows10-2004-x64

6

Xeno-v1.3....x.html

windows11-ltsc_2024-x64

6

Xeno-v1.3....ain.js

windows10-2004-x64

3

Xeno-v1.3....ain.js

windows11-ltsc_2024-x64

8

Xeno-v1.3....ain.js

windows10-2004-x64

3

Xeno-v1.3....ain.js

windows11-ltsc_2024-x64

3

Xeno-v1.3....nls.js

windows10-2004-x64

3

Xeno-v1.3....nls.js

windows11-ltsc_2024-x64

8

Xeno-v1.3....-cn.js

windows10-2004-x64

3

Xeno-v1.3....-cn.js

windows11-ltsc_2024-x64

3

Xeno-v1.3....-tw.js

windows10-2004-x64

3

Xeno-v1.3....-tw.js

windows11-ltsc_2024-x64

8

Xeno-v1.3....der.js

windows10-2004-x64

3

Xeno-v1.3....der.js

windows11-ltsc_2024-x64

8

Analysis

max time kernel
900s
max time network
426s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 06:03

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

trojan sheetrat

Behavioral task

behavioral1

Sample

Xeno-v1.3.60/Xeno.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

900 seconds

discovery execution sheetrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

Xeno-v1.3.60/Xeno.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

discovery execution sheetrat persistence privilege_escalation trojan

Behavioral task

behavioral3

Sample

Xeno-v1.3.60/XenoUI.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

Xeno-v1.3.60/XenoUI.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

Xeno-v1.3.60/editor/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

900 seconds

Behavioral task

behavioral6

Sample

Xeno-v1.3.60/editor/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

900 seconds

Behavioral task

behavioral7

Sample

Xeno-v1.3.60/editor/vs/base/worker/workerMain.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

Xeno-v1.3.60/editor/vs/base/worker/workerMain.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral9

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral10

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral11

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.nls.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral12

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.nls.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral13

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.nls.zh-cn.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral14

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.nls.zh-cn.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral15

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.nls.zh-tw.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral16

Sample

Xeno-v1.3.60/editor/vs/editor/editor.main.nls.zh-tw.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral17

Sample

Xeno-v1.3.60/editor/vs/loader.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral18

Sample

Xeno-v1.3.60/editor/vs/loader.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
Xeno-v1.3.60/XenoUI.exe
Size 145KB
Sample260820-gsa3vsfl2w
SHA256 6e5ddbf5d1a9f963cf0bc9bd459dcff983e95704abd5cb1c582365f3eadb2ebc
MD5 d4ae28d2b6115d75d8ec2df06d9852c9
SHA1 3a4e82abde784aa261ea760f0a8bb34eb95eb403
SHA512 b6c041079f31acd92d0007c43c8a93317c3a917817eef48ba9c42d6456d11c9eb8a2cbf6f130b358613e894a3e999c916cab27fc5077407f416364c8aa0efddd
SSDEEP 3072:iBMd4YOG6EEaScUrlc2TbyG3FC8Z7Pby6SgV9Sj0LC55dVPOdX0VTbO:x4tr22HyGt9by6p9Sj0Uh2dk5O
TLSH
T129E3B041376C8A22CABF0FBD64B652955A71BF16A563E70E14CC349C6CF7382864236F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.60\XenoUI.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.60\XenoUI.exe"
1⤵
PID:2884

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4360

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2884-0-0x00007FFF8C95F000-0x00007FFF8C960000-memory.dmp

Download

memory/2884-1-0x0000011D305A0000-0x0000011D305C6000-memory.dmp

Download

memory/2884-2-0x00007FFF8C7D0000-0x00007FFF8D174000-memory.dmp

Download

© 2018-2026

Terms | Privacy