General

  • Target
    Xeno.exe
  • Size 3.8MB
  • Sample260903-pcp6vaha86
  • SHA256 22367e3b72d8609dc4f9329100daf1be62fc01847c93f9f9fe2c70fb66f58aca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Xeno.exe
    • Size 3.8MB
    • SHA256 22367e3b72d8609dc4f9329100daf1be62fc01847c93f9f9fe2c70fb66f58aca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Disables service(s)

MITRE ATT&CK Enterprise v16

Tasks