Overview
overview
8Static
static
3ExLoader_I...er.exe
windows10-2004-x64
7ExLoader_I...er.exe
windows11-ltsc_2024-x64
1audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1data/app.so
ubuntu-18.04-amd64
1flutter_windows.dll
windows10-2004-x64
1msvcp140.dll
windows10-2004-x64
1msvcp140.dll
windows11-ltsc_2024-x64
1permission...in.dll
windows10-2004-x64
1permission...in.dll
windows11-ltsc_2024-x64
8url_launch...in.dll
windows10-2004-x64
1url_launch...in.dll
windows11-ltsc_2024-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140.dll
windows11-ltsc_2024-x64
1vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
899s - max time network
488s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/06/2026, 19:01
Static task
static1
Behavioral task
behavioral1
Sample
ExLoader_Installer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ExLoader_Installer.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
data/app.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
flutter_windows.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
msvcp140.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
permission_handler_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
permission_handler_windows_plugin.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
url_launcher_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
url_launcher_windows_plugin.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
vcruntime140.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260618-en
General
- Target vcruntime140_1.dll
- Size 46KB
- Sample260625-xpbg8aew2s
- SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
- MD5 03b43160d21c08de07a79d0a1c5ee81d
- SHA1 0a449093006af667432b83303614b53b62fc0d05
- SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
- SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
- TLSH T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140_1.dll,#11⤵PID:2884
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5856
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:3812