Overview
overview
8Static
static
3ExLoader_I...er.zip
windows10-2004-x64
1ExLoader_I...er.zip
windows11-ltsc_2024-x64
8data/flutt...st.bin
windows10-2004-x64
3data/flutt...st.bin
windows11-ltsc_2024-x64
8data/flutt...t.json
windows10-2004-x64
3data/flutt...t.json
windows11-ltsc_2024-x64
3data/flutt...CES.gz
windows10-2004-x64
1data/flutt...CES.gz
windows11-ltsc_2024-x64
1data/flutt...t.json
windows10-2004-x64
3data/flutt...t.json
windows11-ltsc_2024-x64
3data/flutt...DE.wav
windows10-2004-x64
6data/flutt...DE.wav
windows11-ltsc_2024-x64
8data/flutt...EN.wav
windows10-2004-x64
6data/flutt...EN.wav
windows11-ltsc_2024-x64
8data/flutt...RU.wav
windows10-2004-x64
6data/flutt...RU.wav
windows11-ltsc_2024-x64
1data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
1data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
1data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
1data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
8data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
1data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
1data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
8data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/07/2026, 22:22
Static task
static1
Behavioral task
behavioral1
Sample
ExLoader_Installer.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ExLoader_Installer.zip
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
data/flutter_assets/AssetManifest.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
data/flutter_assets/AssetManifest.bin
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
data/flutter_assets/FontManifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
data/flutter_assets/FontManifest.json
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
data/flutter_assets/NOTICES.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/flutter_assets/NOTICES.gz
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral9
Sample
data/flutter_assets/NativeAssetsManifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/flutter_assets/NativeAssetsManifest.json
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral11
Sample
data/flutter_assets/resources/audio/AbominationPissed_DE.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/flutter_assets/resources/audio/AbominationPissed_DE.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral13
Sample
data/flutter_assets/resources/audio/AbominationPissed_EN.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/flutter_assets/resources/audio/AbominationPissed_EN.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
data/flutter_assets/resources/audio/AbominationPissed_RU.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/flutter_assets/resources/audio/AbominationPissed_RU.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
data/flutter_assets/resources/audio/Csgo_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/flutter_assets/resources/audio/Csgo_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
data/flutter_assets/resources/audio/Csgo_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/flutter_assets/resources/audio/Csgo_press.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral21
Sample
data/flutter_assets/resources/audio/Fortnite_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/flutter_assets/resources/audio/Fortnite_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral23
Sample
data/flutter_assets/resources/audio/Fortnite_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/flutter_assets/resources/audio/Fortnite_press.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral25
Sample
data/flutter_assets/resources/audio/Standard_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/flutter_assets/resources/audio/Standard_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
data/flutter_assets/resources/audio/Standard_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/flutter_assets/resources/audio/Standard_press.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral29
Sample
data/flutter_assets/resources/audio/Steam_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/flutter_assets/resources/audio/Steam_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral31
Sample
data/flutter_assets/resources/audio/Steam_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/flutter_assets/resources/audio/Steam_press.wav
Resource
win11ltsc2024-20260706-en
General
- Target data/flutter_assets/resources/audio/Fortnite_hover.wav
- Size 137KB
- Sample260706-2ablwscw9x
- SHA256 3e3abb7e29d38fa4b0261ac78427633e8bf6ddf3708de5a45bbdddc2a9f4aa6b
- MD5 b66b7d55b6eeb2ff344a1af41e42a27f
- SHA1 fa6d73d1a35e6098748997cd8c259b4df00d1f9f
- SHA512 3bbde1d2426cc02fc2f034ff9276a23f2060a385b4fb4f6e17ff1b91b6ce904e807e9151c61b9133de3f5218a4dfdd8d0cdece9c2c165186acb92abe51f4b97d
- SSDEEP 768:z5qzevj5RnMNTYWg34Jx2jxsF3HvOOLB2UImSw/5JPYLe5UlihX6xvDxgx1fLz4m:zAz+RnEa34T2loPRdnp4lUGxI
- TLSH T1DED319967AF292ECEE4963B21E46E9421F217442E9C1895FB0BECD4F3F20B1551CB139
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4384 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4384 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe 4384 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4384 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\data\flutter_assets\resources\audio\Fortnite_hover.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4384