General

  • Target
    Xeno.exe
  • Size 5.6MB
  • Sample260903-n3b68sstbv
  • SHA256 a0bdb3140e14b33042842e487974ad9cc09b736a598d639097db828ad6a5eb6a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Xeno.exe
    • Size 5.6MB
    • SHA256 a0bdb3140e14b33042842e487974ad9cc09b736a598d639097db828ad6a5eb6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Disables service(s)

MITRE ATT&CK Enterprise v16

Tasks