General

  • Target
    Xeno.exe
  • Size 6.7MB
  • Sample260903-p7877shd63
  • SHA256 d66aab341146066f85a7656e556c8c2351ae19b8e1c262499f7215fe28aad4a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Xeno.exe
    • Size 6.7MB
    • SHA256 d66aab341146066f85a7656e556c8c2351ae19b8e1c262499f7215fe28aad4a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Disables service(s)

MITRE ATT&CK Enterprise v16

Tasks