s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

MB-7904b287ba8d0c7076ff83edf3b22410a7cdd4044d17f7fca518eb74282c7f32 high

📛 Threat Title

Unknown: xenon.jar.github-Course23sz

Category: Unknown Published: Source updated: First seen: Last updated: Source: Abuse.ch

Description

File type: zip. Size: 619186 bytes. Reporter: GhostTypes. First seen: 2026-09-25 12:08:07.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

hash_sha256 7904b287ba8d0c7076ff83edf3b22410a7cdd4044d17f7fca518eb74282c7f32 VT 2 / 75

IOC database

Type
hash_sha256
Value
7904b287ba8d0c7076ff83edf3b22410a7cdd4044d17f7fca518eb74282c7f32
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Unknown

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Flagged by 2 of 75 VirusTotal vendors

VendorVerdictDetection
Kaspersky malicious HEUR:Trojan.Java.Generic
NANO-Antivirus malicious Exploit.Zip.Heuristic-java.csrvpr

Details From VirusTotal

Basic Properties
MD562f44cdf7cdb8caac27b1da2eac54ff1
SHA-19fc93e42794b58fa292c65cf68fdd552766fbaf7
SHA-2567904b287ba8d0c7076ff83edf3b22410a7cdd4044d17f7fca518eb74282c7f32
VHash17c5b0ecbf53f77b4ce2d2c2c8dc7fdb
SSDEEP12288:Mjc2vP3gI4lI2K6mxnUv2+E3Yr8F49s/wzPBQ/6u8:M3PXH+mUoFuSyPBQ/o
TLSHT1A8D41226EEAA54F2F023A77844600A15B82C96D36D07201739FE39CF888296F7F755C9
File typeJAR
File type tagjar
File extensionjar
MagicZip archive data, at least v2.0 to extract, compression method=deflate
File size604.7 KB
History
First seen on VirusTotal2026-09-02 15:39 UTC
Last submission2026-09-22 05:49 UTC
Last analysis2026-09-04 07:30 UTC
Last modified on VirusTotal2026-09-25 14:59 UTC
Known Names
  • zoc0tfbp3.exe
  • xenon.jar
hash_sha1 9fc93e42794b58fa292c65cf68fdd552766fbaf7 VT 2 / 75

IOC database

Type
hash_sha1
Value
9fc93e42794b58fa292c65cf68fdd552766fbaf7
First seen
Last seen
Attached to this threat
Appears in
1 threat

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Flagged by 2 of 75 VirusTotal vendors

VendorVerdictDetection
Kaspersky malicious HEUR:Trojan.Java.Generic
NANO-Antivirus malicious Exploit.Zip.Heuristic-java.csrvpr

Details From VirusTotal

Basic Properties
MD562f44cdf7cdb8caac27b1da2eac54ff1
SHA-19fc93e42794b58fa292c65cf68fdd552766fbaf7
SHA-2567904b287ba8d0c7076ff83edf3b22410a7cdd4044d17f7fca518eb74282c7f32
VHash17c5b0ecbf53f77b4ce2d2c2c8dc7fdb
SSDEEP12288:Mjc2vP3gI4lI2K6mxnUv2+E3Yr8F49s/wzPBQ/6u8:M3PXH+mUoFuSyPBQ/o
TLSHT1A8D41226EEAA54F2F023A77844600A15B82C96D36D07201739FE39CF888296F7F755C9
File typeJAR
File type tagjar
File extensionjar
MagicZip archive data, at least v2.0 to extract, compression method=deflate
File size604.7 KB
History
First seen on VirusTotal2026-09-02 15:39 UTC
Last submission2026-09-22 05:49 UTC
Last analysis2026-09-04 07:30 UTC
Last modified on VirusTotal2026-09-25 14:59 UTC
Known Names
  • zoc0tfbp3.exe
  • xenon.jar
hash_md5 62f44cdf7cdb8caac27b1da2eac54ff1 VT 2 / 75

IOC database

Type
hash_md5
Value
62f44cdf7cdb8caac27b1da2eac54ff1
First seen
Last seen
Attached to this threat
Appears in
1 threat

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Flagged by 2 of 75 VirusTotal vendors

VendorVerdictDetection
Kaspersky malicious HEUR:Trojan.Java.Generic
NANO-Antivirus malicious Exploit.Zip.Heuristic-java.csrvpr

Details From VirusTotal

Basic Properties
MD562f44cdf7cdb8caac27b1da2eac54ff1
SHA-19fc93e42794b58fa292c65cf68fdd552766fbaf7
SHA-2567904b287ba8d0c7076ff83edf3b22410a7cdd4044d17f7fca518eb74282c7f32
VHash17c5b0ecbf53f77b4ce2d2c2c8dc7fdb
SSDEEP12288:Mjc2vP3gI4lI2K6mxnUv2+E3Yr8F49s/wzPBQ/6u8:M3PXH+mUoFuSyPBQ/o
TLSHT1A8D41226EEAA54F2F023A77844600A15B82C96D36D07201739FE39CF888296F7F755C9
File typeJAR
File type tagjar
File extensionjar
MagicZip archive data, at least v2.0 to extract, compression method=deflate
File size604.7 KB
History
First seen on VirusTotal2026-09-02 15:39 UTC
Last submission2026-09-22 05:49 UTC
Last analysis2026-09-04 07:30 UTC
Last modified on VirusTotal2026-09-25 14:59 UTC
Known Names
  • zoc0tfbp3.exe
  • xenon.jar

References (1)

Remediations (10)

  • Xenon by Netherlands eScience Center - GitHub Pages
    web:xenon-middleware.github.io

    Xenon is developed by the Netherlands eScience Center as a support library for our projects. Several projects develop end-user applications that require access to distributed compute and storage resources.

  • Remediating a leaked secret in your repository - GitHub Docs
    web:docs.github.com

    This will help you assess the risk and determine the best course of action for remediation . Determine the secret type and its provider. For example, is the secret a GitHub personal access token (PAT), an OpenAI API key, an SSH private key? Locate the repository, file and line that contains the leaked secret. Identify the secret owner.

  • GitHub - AV306/xenon: Block game utility mod (Fabric)
    web:github.com

    Xenon tries to implement features similar to those in clients such as Badlion and Lunar, while maintaining compatibility with other mods. Most mods follow the traditional "problem-solution" model - they give you a solution to a common problem. Xenon, however, is more like a Swiss Army chainsaw (but nowhere near as powerful) - it gives you a bunch of solutions and lets you figure out what to ...

  • Releases · AV306/xenon - GitHub
    web:github.com

    Block game utility mod (Fabric). Contribute to AV306/xenon development by creating an account on GitHub.

  • Fake Xeno EXPOSED: Roblox Executor Installer Steals the PC
    web:malwaretips.com

    Overview They take the passwords already saved in the browser, the Discord token, the game logins, the wallets, and then the PC itself. They get that haul with one file sold as a free, undetected Xeno executor in a Roblox Discord or a script forum. After you run the installer, the cheat never arrives. A stealer copies what is already on the machine. A remote-access tool stays, so the people ...

  • 0.3.19+mc1.20.1 - Xenon - Modrinth
    web:modrinth.com

    Download Xenon .3.19+mc1.20.1 on Modrinth. Supports 1.20.1 Forge & Neoforge. Published on May 26, 2024. 147550 downloads.

  • Xenon - xenon-0.3.31+mc1.20.1.jar - Minecraft Mods - CurseForge
    web:www.curseforge.com

    Forge port of the Sodium performance mod. Download Xenon by Txni, with over 16.5M downloads on CurseForge - xenon-.3.31+mc1.20.1.jar File - Updated on September 24, 2024

  • [Release] Xenos injector v2.3.2 - UnknownCheats
    web:www.unknowncheats.me

    Redesigned GUI and some more features - Supports x86 and x64 processes and modules - Kernel-mode injection feature (driver required) - Manual map of k

  • [Source] Xenon client (donutsmp cheat) - UnknownCheats
    web:www.unknowncheats.me

    This is a skidded client from argon/krypton designed for donutsmp The client is for 1.21.1, you can however easily port it to 1.21.11.

  • Getting started — xenon3 tutorial documentation
    web:xenon-tutorial.readthedocs.io

    The focus of this tutorial is on using Xenon's command line interface, but be aware that you can use xenon's functionality from other programming languages through xenon's gRPC extension. Where relevant, we have included equivalent code snippets, written in Java and Python, as a separate tab.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.