General
- Target xo.exe
- Size 8.9MB
- Sample260929-2w85aahb49
- SHA256 c6b3efcf1e2991bf2798fcda7d24586f1bbdf695816c8d8a2612c67bfae24b8f
- MD5 d5bb8e496e7ee91cfb8c4bcd9077f8fe
- SHA1 c3c9fb6f657c4534192fb9de76a5e95815ce7ea3
- SHA512 e42187c0747ed52461141d6388fe643619e1313aac3aac5125d77befa09382e2d11f9be5baa42b697b651da008e4196c44629b34c3e3788c425e7cf8a10f0e18
- SSDEEP 196608:/ENiXUtv5sO4QVtZ1Xwm3/MAhg6BC+hppdbv8Pvtuq:/K5l4QVt3vrhg64+h3+N
- TLSH T16C961252A287923BE0491B3A0562F27458FB6F507026DD1287F46CEFFF354611E2E6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
xo.exe
Resource
win10v2004-20260911-en
22 signatures
900 seconds
Malware Config
Targets
-
- Target xo.exe
- Size 8.9MB
- SHA256 c6b3efcf1e2991bf2798fcda7d24586f1bbdf695816c8d8a2612c67bfae24b8f
- MD5 d5bb8e496e7ee91cfb8c4bcd9077f8fe
- SHA1 c3c9fb6f657c4534192fb9de76a5e95815ce7ea3
- SHA512 e42187c0747ed52461141d6388fe643619e1313aac3aac5125d77befa09382e2d11f9be5baa42b697b651da008e4196c44629b34c3e3788c425e7cf8a10f0e18
- SSDEEP 196608:/ENiXUtv5sO4QVtZ1Xwm3/MAhg6BC+hppdbv8Pvtuq:/K5l4QVt3vrhg64+h3+N
- TLSH T16C961252A287923BE0491B3A0562F27458FB6F507026DD1287F46CEFFF354611E2E6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.