General

  • Target
    xeno-base.7z
  • Size 696KB
  • Sample260823-rxk4qsxend
  • SHA256 1a4ad514f66ab484166399e76e2bfc023738ecbd9c5daddc12bd1043312ccd31
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      xeno-base.7z
    • Size 696KB
    • SHA256 1a4ad514f66ab484166399e76e2bfc023738ecbd9c5daddc12bd1043312ccd31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      xeno-base/include.h
    • Size 435B
    • SHA256 7a05b3412252f353be2784938c2352be9bff693a3a947e6f4d9fc16fc28391d6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      xeno-base/src/cache/index.cpp
    • Size 6KB
    • SHA256 548fc9082d9b1a4312fbf436b98edfdefc924b42d0d13e8c288cc5c309f5d321
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xeno-base/src/cache/index.h
    • Size 671B
    • SHA256 8cc7c76ea40d5f017022a0b32ca602822d4f78b4d548592d1ac90ef8542fb76f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      xeno-base/src/engine/offsets.h
    • Size 700B
    • SHA256 845334c9377d6338f14073d596026483c42451ce28249f8198582e3e76e8f1ef
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      xeno-base/src/engine/sdk.h
    • Size 9KB
    • SHA256 d19374abd07dbaedbde9f0a9befad2c209ce8569b624eeb162f09e1f5374e450
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      xeno-base/src/entry/main.cpp
    • Size 970B
    • SHA256 7819251e80309f72335f2bdbe600a8535e65f47e527b62048faffc18232c93e5
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      xeno-base/src/memory/backend.h
    • Size 4KB
    • SHA256 39ba0704894fdb7264e077d582088f71cdded9670f6320ba36ae9e471f621467
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xeno-base/src/rendering/menu/index.h
    • Size 9KB
    • SHA256 94296b1ef044937c28f5ba7383107e7dea5b5a1330bb00974177bf25df925ba7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xeno-base/thirdparty/imgui/fonts.h
    • Size 862KB
    • SHA256 bbedfa714f848fe0181a262c83bf4014d0934a762f0118d3cd828976338a94ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      xeno-base/thirdparty/imgui/imconfig.h
    • Size 11KB
    • SHA256 0884061cc43e27e1d346fe18dcd1425792eb2532d3d16610a82eb5ac751f7594
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      xeno-base/thirdparty/imgui/imgui.cpp
    • Size 861KB
    • SHA256 fa9043765c8b8ae24fc440e036d592654f13fb52524dc8939680841ac2221489
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xeno-base/thirdparty/imgui/imgui.h
    • Size 369KB
    • SHA256 d9d28b1dfbd23841d99bb0a3f2474a28a2cae4e706919f74ef803ab9d9a67c9d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xeno-base/thirdparty/imgui/imgui_demo.cpp
    • Size 544KB
    • SHA256 66b99e35c4c3858eca4886956524380cc9889605836f6caa4beb5b2338aa1856
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      xeno-base/thirdparty/imgui/imgui_draw.cpp
    • Size 252KB
    • SHA256 5010a15d7797b4f96e0314087f961e16af83e0f2eba6f832c358ff890ef491d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xeno-base/thirdparty/imgui/imgui_fonts.cpp
    • Size 79B
    • SHA256 08462e939537632c8ce3f59835f997634342523a52b5369662e61e425792c6bb
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

adwarepersistenceransomwarespyware
Score
8/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral13

execution
Score
3/10

behavioral14

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

adwareexecutionpersistenceransomwarespyware
Score
8/10