URLhaus Database

You are currently viewing the URLhaus database entry for https://github.com/thunder21wave/Xeno-Executor/releases/download/Enjoy!/Xeno.Executor.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3335737
URL: https://github.com/thunder21wave/Xeno-Executor/releases/download/Enjoy!/Xeno.Executor.zip
URL Status:Offline
Host: github.com
Date added:2024-12-08 01:23:07 UTC
Last online:2024-12-11 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2024-12-08 01:25:17 UTC to noc{at}github[dot]com)
Takedown time:3 days, 8 hours, 8 minutes Bad (down since 2024-12-11 09:32:30 UTC)
Tags:LummaStealer MeduzaStealer zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-12-09Xeno.Executor.zipzip 2c5b3b1c91964541fdee6c48ee1f4e816b4d5ad1a3b0a9561975055b1e1db2d8n/a LummaStealer
2024-12-09Xeno.Executor.zipzip fd2fc074dc8f8cb8e80767a86abd079bfe03687919d9f2a574aa74e09f6f732en/a LummaStealer
2024-12-08Xeno.Executor.zipzip 4190f3176898f78a05e18e4b4c1d325017bb390afb2f559affeadca36a40e1b2n/a LummaStealer
2024-12-08Xeno.Executor.zipzip c23c24abc313a1b7bf98971b82f851b2f195f60c82e97e73e50d26fcaf1e3f2bn/a LummaStealer
2024-12-08Xeno.Executor.zipzip 87921508cf64468bd532f55c006746233999552fcb6b6f1814f48259a5759331n/a LummaStealer
2024-12-08Xeno.Executor.zipzip 7cc92c3d3fd758df2356bcb442f4bba94eed0d2b1bf587f761aacc8bf83b45b2n/a MeduzaStealer
2024-12-08Xeno.Executor.zipzip 067b72ca55be449fb134be88a23708469b0114847c98108151b445b10dd83614Virustotal results 49.25% MeduzaStealer