General
- Target Xeno.exe
- Size 5.6MB
- Sample260903-n3b68sstbv
- SHA256 a0bdb3140e14b33042842e487974ad9cc09b736a598d639097db828ad6a5eb6a
- MD5 ccae8e0c5c70bdfc73629b8cfd103002
- SHA1 60f9fbad4a3608fd3e4aef822a2c504bfff67a20
- SHA512 9fc1ab0873064dda6dd8091654753bf5d755d18acaa1c7dc57eb170dd311dcad6d287c05df7a9131118030571d91ab34933526c420fad761789025ed1ef2969c
- SSDEEP 49152:2YUs9g2cikOp6H+e5Si3IcHmxi8LKBK5KHZErweGxLtzA5EUEIKoT2mcrSyEAfgX:22H3zne8xiLZdWEUEjDmQHza1wwKThw
- TLSH T11F469C13FC6518EAC2EAA23589B65152BB34BC445B2223D72B90F3386FB77D09D79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Xeno.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Xeno.exe
- Size 5.6MB
- SHA256 a0bdb3140e14b33042842e487974ad9cc09b736a598d639097db828ad6a5eb6a
- MD5 ccae8e0c5c70bdfc73629b8cfd103002
- SHA1 60f9fbad4a3608fd3e4aef822a2c504bfff67a20
- SHA512 9fc1ab0873064dda6dd8091654753bf5d755d18acaa1c7dc57eb170dd311dcad6d287c05df7a9131118030571d91ab34933526c420fad761789025ed1ef2969c
- SSDEEP 49152:2YUs9g2cikOp6H+e5Si3IcHmxi8LKBK5KHZErweGxLtzA5EUEIKoT2mcrSyEAfgX:22H3zne8xiLZdWEUEjDmQHza1wwKThw
- TLSH T11F469C13FC6518EAC2EAA23589B65152BB34BC445B2223D72B90F3386FB77D09D79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Disables service(s)