Analysis
- user interaction
yes - max time kernel
149s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/08/2026, 17:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xone.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xone.exe
Resource
win11ltsc2024-20260709-en
31 signatures
150 seconds
General
- Target Xone.exe
- Size 363KB
- Sample260822-v79fvsxcld
- SHA256 e1283ec4e87a0a4654522675c6ae94b87ba8925d3b768f56a61b70e26384e3e9
- MD5 62540a77916f02ecaf5119d469528ca9
- SHA1 c42ca2e23d501ef3208fa286e220bbe25892fd71
- SHA512 0ac2941ce00e31f824cf15ad526275be8f01e3040e4d750ff70693db9ad1599740a6a8940a8e914378d23b86786801e56d9a951b0f497beb96d3785b0a7505b7
- SSDEEP 6144:0zO6F7XcjEogx8wwuOQ4Noh/+H6AGJAbpZRhW:K74NAZJUh
- TLSH T1FB84C5247FA98E08E580253E459F1618DBDAD1F226326303770AEF621D05DDEDE2D3DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Xone.exe"C:\Users\Admin\AppData\Local\Temp\Xone.exe"1⤵PID:3828
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2032