General
- Target Xeno.exe
- Size 69.0MB
- Sample261011-b2ql1swt9q
- SHA256 021bc8299871ba2b3ea4924710b0f281c0e52543bee0a0e4afc937ff9a6a8dd7
Score
7/10
Malware Config
Targets
-
- Target Xeno.exe
- Size 69.0MB
- SHA256 021bc8299871ba2b3ea4924710b0f281c0e52543bee0a0e4afc937ff9a6a8dd7
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Uses WMI to collect hardware manufacturer information
Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Windows Management Instrumentation
2