Overview
overview
8Static
static
3ExLoader_I...er.zip
windows10-2004-x64
1ExLoader_I...er.zip
windows11-ltsc_2024-x64
8data/flutt...st.bin
windows10-2004-x64
3data/flutt...st.bin
windows11-ltsc_2024-x64
8data/flutt...t.json
windows10-2004-x64
3data/flutt...t.json
windows11-ltsc_2024-x64
3data/flutt...CES.gz
windows10-2004-x64
1data/flutt...CES.gz
windows11-ltsc_2024-x64
1data/flutt...t.json
windows10-2004-x64
3data/flutt...t.json
windows11-ltsc_2024-x64
3data/flutt...DE.wav
windows10-2004-x64
6data/flutt...DE.wav
windows11-ltsc_2024-x64
8data/flutt...EN.wav
windows10-2004-x64
6data/flutt...EN.wav
windows11-ltsc_2024-x64
8data/flutt...RU.wav
windows10-2004-x64
6data/flutt...RU.wav
windows11-ltsc_2024-x64
1data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
1data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
1data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
1data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
8data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
1data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
1data/flutt...er.wav
windows10-2004-x64
6data/flutt...er.wav
windows11-ltsc_2024-x64
8data/flutt...ss.wav
windows10-2004-x64
6data/flutt...ss.wav
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/07/2026, 22:22
Static task
static1
Behavioral task
behavioral1
Sample
ExLoader_Installer.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ExLoader_Installer.zip
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
data/flutter_assets/AssetManifest.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
data/flutter_assets/AssetManifest.bin
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
data/flutter_assets/FontManifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
data/flutter_assets/FontManifest.json
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
data/flutter_assets/NOTICES.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/flutter_assets/NOTICES.gz
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral9
Sample
data/flutter_assets/NativeAssetsManifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/flutter_assets/NativeAssetsManifest.json
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral11
Sample
data/flutter_assets/resources/audio/AbominationPissed_DE.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/flutter_assets/resources/audio/AbominationPissed_DE.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral13
Sample
data/flutter_assets/resources/audio/AbominationPissed_EN.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/flutter_assets/resources/audio/AbominationPissed_EN.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
data/flutter_assets/resources/audio/AbominationPissed_RU.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/flutter_assets/resources/audio/AbominationPissed_RU.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
data/flutter_assets/resources/audio/Csgo_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/flutter_assets/resources/audio/Csgo_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
data/flutter_assets/resources/audio/Csgo_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/flutter_assets/resources/audio/Csgo_press.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral21
Sample
data/flutter_assets/resources/audio/Fortnite_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/flutter_assets/resources/audio/Fortnite_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral23
Sample
data/flutter_assets/resources/audio/Fortnite_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/flutter_assets/resources/audio/Fortnite_press.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral25
Sample
data/flutter_assets/resources/audio/Standard_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/flutter_assets/resources/audio/Standard_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
data/flutter_assets/resources/audio/Standard_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/flutter_assets/resources/audio/Standard_press.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral29
Sample
data/flutter_assets/resources/audio/Steam_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/flutter_assets/resources/audio/Steam_hover.wav
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral31
Sample
data/flutter_assets/resources/audio/Steam_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/flutter_assets/resources/audio/Steam_press.wav
Resource
win11ltsc2024-20260706-en
General
- Target data/flutter_assets/resources/audio/Steam_press.wav
- Size 170KB
- Sample260706-2ablwscw9x
- SHA256 e7c36644507ee52d11ad20e17a165bcb4bb7efb14c573cd29921088c03777241
- MD5 f8eab8f1b49b806f490f8716a8208190
- SHA1 d5e7401f403733c071347616a2c0a069f74be52e
- SHA512 71a75f1e5fe3204caa70adc9d8c8a96155dfbe0b131afcc4bcd55908048ae314b81a84b54be21a1f99321e89cc4c77042bd0d0ad4033988af8d0042060631d31
- SSDEEP 3072:MMbqqHdE7++/ieS7egbwyo5RCRYQkMpHfBEp3ZDJgy7iFM/DhHK02vN:MMbfHdEK+/E7pg3xMpHfiHJfmFMtvk
- TLSH T13204AE02B2A95329E1CC1E321C4589C11FB5B54EEE81997AB1BDC643FBA14235ECFE1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2968 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2968 vlc.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 2968 vlc.exe 2968 vlc.exe 2968 vlc.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2968 vlc.exe 2968 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2968 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\data\flutter_assets\resources\audio\Steam_press.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2968