General
- Target XENO_FIXED.exe
- Size 20.2MB
- Sample260919-2f92mscc49
- SHA256 a18fa046b7c99701ccef5213aa4e667ae200d823df8758112426ecb9172864ec
- MD5 8764561e3991625f50a0e4cecdb8310e
- SHA1 e6e16fe395f510bc03eee5cee020edc9b3ef2d15
- SHA512 09a0db04ae3bba60f02e6daae46ff086186dcc9a8900b376d4ed0d082c7204c349c28497b1a83f502199052d5d48b7661418c4e4b15cb5b0458595c2cc0bbce7
- SSDEEP 393216:x85vzanguFaW8ZZLBr7M5likuC9XVBeiYDWAq4traxHi4BJKcOqLiS:G5vz6aW8jB7M5lCCNV4VraxC4BJAqL
- TLSH T13327339C638411E6ECC6E33AA5E3803386C5B66B0B59C28747F45A941D630D9FF7AF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
XENO_FIXED.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
XENO_FIXED.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
XENO_FIXED.pyc
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
XENO_FIXED.pyc
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target XENO_FIXED.exe
- Size 20.2MB
- SHA256 a18fa046b7c99701ccef5213aa4e667ae200d823df8758112426ecb9172864ec
- MD5 8764561e3991625f50a0e4cecdb8310e
- SHA1 e6e16fe395f510bc03eee5cee020edc9b3ef2d15
- SHA512 09a0db04ae3bba60f02e6daae46ff086186dcc9a8900b376d4ed0d082c7204c349c28497b1a83f502199052d5d48b7661418c4e4b15cb5b0458595c2cc0bbce7
- SSDEEP 393216:x85vzanguFaW8ZZLBr7M5likuC9XVBeiYDWAq4traxHi4BJKcOqLiS:G5vz6aW8jB7M5lCCNV4VraxC4BJAqL
- TLSH T13327339C638411E6ECC6E33AA5E3803386C5B66B0B59C28747F45A941D630D9FF7AF12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target XENO_FIXED.pyc
- Size 63KB
- SHA256 b9b99b1f2d8da77472c83e1ba20f21cbe5b5120252467d578d5c310465d70b54
- MD5 12018da295298ce147c2b1d06a1a997a
- SHA1 a7c4dc0d48d7b31000e4ffe89ae086630187e408
- SHA512 7720f2f43eb84f08dccb5fb051c80be35deb2b6bc0fdb8882feb429ded7e7c2728d8573dcbbdb5f97b8a8d0b30e0424d3d6be220db5c180b99e6917552bc0af8
- SSDEEP 768:7/F6wto2HZGkflZlmosY3YVXJPCW8t2Wyvh6RMtPacCRw+hGUEDjSXxkt9xLT:7/F6wt5tmosfV9I2WCtPFCRw+qnM09x
- TLSH T19E53E68BE8705553EF18F17580E948A0C36EBD82B355D722351E8239BECBB7ADD61318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10