Overview
overview
3Static
static
1ExLaµñch€r.zip
windows7-x64
1ExLaµñch€r.zip
windows10-2004-x64
1ExLaµñch...er.rar
windows7-x64
1ExLaµñch...er.rar
windows10-2004-x64
1ExL4uncher.rar
windows7-x64
1ExL4uncher.rar
windows10-2004-x64
1AbRoot.dll
windows7-x64
1AbRoot.dll
windows10-2004-x64
1AdTree.dll
windows7-x64
1AdTree.dll
windows10-2004-x64
1ExLaµncher.exe
windows7-x64
3ExLaµncher.exe
windows10-2004-x64
3x64/trading_api64.dll
windows7-x64
1x64/trading_api64.dll
windows10-2004-x64
1x64/tradin...ts.dll
windows7-x64
1x64/tradin...ts.dll
windows10-2004-x64
1x86/api-ms...-1.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1x86/api-ms...-0.dll
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20/11/2024, 02:22
Static task
static1
Behavioral task
behavioral1
Sample
ExLaµñch€r.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ExLaµñch€r.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
ExLaµñch€r/ExLaüncher.rar
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
ExLaµñch€r/ExLaüncher.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
ExL4uncher.rar
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
ExL4uncher.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
AbRoot.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
AbRoot.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
AdTree.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
AdTree.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ExLaµncher.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ExLaµncher.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
x64/trading_api64.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
x64/trading_api64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
x64/tradingnetworkingsockets.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
x64/tradingnetworkingsockets.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
x86/api-ms-win-core-processthreads-l1-1-1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
x86/api-ms-win-core-profile-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
x86/api-ms-win-core-rtlsupport-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
x86/api-ms-win-core-string-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
x86/api-ms-win-core-synch-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
x86/api-ms-win-core-synch-l1-2-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
x86/api-ms-win-core-sysinfo-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
x86/api-ms-win-core-timezone-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
x86/api-ms-win-core-util-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
x86/api-ms-win-crt-conio-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
x86/api-ms-win-crt-convert-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
x86/api-ms-win-crt-environment-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
x86/api-ms-win-crt-filesystem-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
x86/api-ms-win-crt-heap-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
x86/api-ms-win-crt-locale-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
x86/api-ms-win-crt-math-l1-1-0.dll
Resource
win10v2004-20241007-en
General
-
Target
ExLaµncher.exe
-
Size
17.5MB
-
MD5
ef2c912ce872123b912857794b300c72
-
SHA1
37e522a509b113b74022702fe51182d420184f7e
-
SHA256
757204427d5f4006740424f8e1e96bc75ab4091ca3b77b8301e097752e221fee
-
SHA512
0111a84c244da78f5a6ab78ee568f8348504725216ea69e9daf78aa55ea29845d8b21180169e543284631fb585a02eb21b56d068db80e6787155bc9decb8f65e
-
SSDEEP
393216:qP97HkONxopNQwQR1szWjpE2y7PMo+LXY8M:oqNQwKszWd1y7koV8M
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ExLaµncher.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3236 ExLaµncher.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
MD561f7c81f79021fd9a002183764df0c28
SHA15053039426b273b9d14a2e5c00f6264978e5f94d
SHA25651bfd4639e6b5634e35da8af3a149d885eee76026a828aabffb384ab824e75ad
SHA512c3d09db71d6a1f55368f65e972e7fe45bb416ed6baef6e47e01ba025995da50b334e3eac9379bf0eeb00002fffc815ba8fe3f8afb396da80ede2b1674923cd29