Analysis
- max time kernel
899s - max time network
874s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
25/06/2026, 19:01
General
- Target ExLoader_Installer.exe
- Size 173KB
- Sample260625-xpbg8aew2s
- SHA256 93006384d339208d7125662bd928722cb3d1ac08855d46fe4fa2d6579e1260f1
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ExLoader_Installer.exe"C:\Users\Admin\AppData\Local\Temp\ExLoader_Installer.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
weather_now.json
shared_preferences.json
memory/5136-0-0x0000023CFF880000-0x0000023CFF881000-memory.dmp
memory/5136-4-0x0000023CFF890000-0x0000023CFF891000-memory.dmp
memory/5136-1-0x0000023C82A00000-0x0000023C83F95000-memory.dmp
memory/5136-2-0x0000023C82A00000-0x0000023C83F95000-memory.dmp
memory/5136-3-0x0000023C82A00000-0x0000023C83F95000-memory.dmp
memory/5136-7-0x0000023CFFC00000-0x0000023CFFC80000-memory.dmp
memory/5136-6-0x0000023CFFC00000-0x0000023CFFC80000-memory.dmp