Analysis
-
max time kernel
91s -
max time network
210s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19-11-2024 19:18
Static task
static1
Behavioral task
behavioral1
Sample
ExLaµncher.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ExLaµncher.exe
Resource
win10v2004-20241007-en
General
-
Target
ExLaµncher.exe
-
Size
17.5MB
-
MD5
ef2c912ce872123b912857794b300c72
-
SHA1
37e522a509b113b74022702fe51182d420184f7e
-
SHA256
757204427d5f4006740424f8e1e96bc75ab4091ca3b77b8301e097752e221fee
-
SHA512
0111a84c244da78f5a6ab78ee568f8348504725216ea69e9daf78aa55ea29845d8b21180169e543284631fb585a02eb21b56d068db80e6787155bc9decb8f65e
-
SSDEEP
393216:qP97HkONxopNQwQR1szWjpE2y7PMo+LXY8M:oqNQwKszWd1y7koV8M
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
ExLaµncher.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ExLaµncher.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
ExLaµncher.exepid Process 1248 ExLaµncher.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
MD561f7c81f79021fd9a002183764df0c28
SHA15053039426b273b9d14a2e5c00f6264978e5f94d
SHA25651bfd4639e6b5634e35da8af3a149d885eee76026a828aabffb384ab824e75ad
SHA512c3d09db71d6a1f55368f65e972e7fe45bb416ed6baef6e47e01ba025995da50b334e3eac9379bf0eeb00002fffc815ba8fe3f8afb396da80ede2b1674923cd29