General
- Target Xeno-v1.3.60.exe
- Size 84.8MB
- Sample260821-b7d56sem91
- SHA256 4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0
- MD5 b857711f0516ecbd54da4f4c15980d07
- SHA1 d049c39512cca37ad4a0ba798527973cae2f18dd
- SHA512 1cea7234e297dbe20168122d531fcb5bd08ddc8892c4739e5ea7423239268a97b931ee5199fcecc25fe9be67dab73d411216a65122d9d2cae9ac75f6d01636d8
- SSDEEP 1572864:3z7mGUFQi28oCKlR+lk9suop3T99fwXGVuRiXzO/eGbNQZoJs:3z/UurlR99poNPIXGIRMO//bNrs
- TLSH T1B3183390ACCD31AECCACD5F4D860B2052079DE0F99546A23203E7BAF3DB74664DD6963
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Xeno-v1.3.60.exe
Resource
win10ltsc2021-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
LICENSES.chromium.html
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Xeno-v1.3.60.exe
- Size 84.8MB
- SHA256 4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0
- MD5 b857711f0516ecbd54da4f4c15980d07
- SHA1 d049c39512cca37ad4a0ba798527973cae2f18dd
- SHA512 1cea7234e297dbe20168122d531fcb5bd08ddc8892c4739e5ea7423239268a97b931ee5199fcecc25fe9be67dab73d411216a65122d9d2cae9ac75f6d01636d8
- SSDEEP 1572864:3z7mGUFQi28oCKlR+lk9suop3T99fwXGVuRiXzO/eGbNQZoJs:3z/UurlR99poNPIXGIRMO//bNrs
- TLSH T1B3183390ACCD31AECCACD5F4D860B2052079DE0F99546A23203E7BAF3DB74664DD6963
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target LICENSES.chromium.html
- Size 7.9MB
- SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
- MD5 0e3e4362f785aff0b9e1852b1064c0f1
- SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
- SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
- SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
- TLSH T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10