Overview
overview
7Static
static
3XMT2_Win_S...28.exe
windows10-2004-x64
7XMT2_Win_S...28.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3XiaoMiTool.exe
windows10-2004-x64
3XiaoMiTool.exe
windows11-ltsc_2024-x64
3XiaoMiTool.jar
windows10-2004-x64
1XiaoMiTool.jar
windows11-ltsc_2024-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-1.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1bin/api-ms...-0.dll
windows10-2004-x64
1Analysis
- max time kernel
148s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/10/2026, 19:54
Behavioral task
behavioral1
Sample
XMT2_Win_Setup_20.7.28.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
XMT2_Win_Setup_20.7.28.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
XiaoMiTool.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
XiaoMiTool.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
XiaoMiTool.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
XiaoMiTool.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
bin/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
bin/api-ms-win-core-console-l1-2-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
bin/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
bin/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral13
Sample
bin/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
bin/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
bin/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
bin/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
bin/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
bin/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
bin/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
bin/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral21
Sample
bin/api-ms-win-core-localization-l1-2-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
bin/api-ms-win-core-memory-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral23
Sample
bin/api-ms-win-core-namedpipe-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
bin/api-ms-win-core-processenvironment-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral25
Sample
bin/api-ms-win-core-processthreads-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
bin/api-ms-win-core-processthreads-l1-1-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral27
Sample
bin/api-ms-win-core-profile-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
bin/api-ms-win-core-rtlsupport-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral29
Sample
bin/api-ms-win-core-string-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
bin/api-ms-win-core-synch-l1-1-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral31
Sample
bin/api-ms-win-core-synch-l1-2-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
bin/api-ms-win-core-sysinfo-l1-1-0.dll
Resource
win10v2004-20260911-en
General
- Target XiaoMiTool.jar
- Size 10.4MB
- Sample261024-ymst6abz4y
- SHA256 a8ba4ab3bcae906f953f4441d637e90509895a75a67733d48d5845bc4c9f8faf
- MD5 53832e28c7dd790766991c6fd037833b
- SHA1 15c482711dcfa937cb2852b00cbccff1b4e42f07
- SHA512 b6c22fb102a8c2cd8532db4e5653ab99271066e1da0db773dc8343b83e495a9ba4e4239852c39dc6cbd908718d22f3841e5183793d4b0604b265d01d67c09172
- SSDEEP 196608:QcN46aOWU+VfbRYB+6eSYLJUlFCov/vg2CIBDx9BgBXmiT7:ZNpnohbiBZDOovwvIt9gBXm67
- TLSH T100B61212F68860FDF583403364125C677A794990E24B909D14FC6A6F998BC4E3F3AB7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3724 java.exe 3724 java.exe