General
- Target Xanthophyll_x64.exe
- Size 93KB
- Sample261014-vbcf9avz3p
- SHA256 d77934c528ff2684f1b585c7bb8f3ded56cf4fba786978c41f3fcc3c978af38e
- MD5 c29c29c1775c1f1c827ea3e327604061
- SHA1 c7e8d86705e2a937b1ac31b634f751c63de69696
- SHA512 3f55c343ceb9ab2fd63d12169dc50fb630bd1d8f41501dc0f724c4b73fe462c78cd38185283bd48aec29b999bd7ba927a17b5a0af2c72319a3999e782649ce7c
- SSDEEP 1536:mAqd4JsZ2+i1uRfAF1EWbYXVx9/fN6oGlL0nq9+v:M4IWF1E/Xf9/fQoUyv
- TLSH T145933A92234840E5E31E92B8886E7977E332BC56D78299CF1FD4AC04BF76DC49E72905
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xanthophyll_x64.exe
Resource
win11ltsc2024-20260911-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target Xanthophyll_x64.exe
- Size 93KB
- SHA256 d77934c528ff2684f1b585c7bb8f3ded56cf4fba786978c41f3fcc3c978af38e
- MD5 c29c29c1775c1f1c827ea3e327604061
- SHA1 c7e8d86705e2a937b1ac31b634f751c63de69696
- SHA512 3f55c343ceb9ab2fd63d12169dc50fb630bd1d8f41501dc0f724c4b73fe462c78cd38185283bd48aec29b999bd7ba927a17b5a0af2c72319a3999e782649ce7c
- SSDEEP 1536:mAqd4JsZ2+i1uRfAF1EWbYXVx9/fN6oGlL0nq9+v:M4IWF1E/Xf9/fQoUyv
- TLSH T145933A92234840E5E31E92B8886E7977E332BC56D78299CF1FD4AC04BF76DC49E72905
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.