Overview

overview

7

Static

static

3

ExLoader.exe

windows10-ltsc_2021-x64

ExLoader.exe

windows11-21h2-x64

7

audioplaye...in.dll

windows10-ltsc_2021-x64

1

audioplaye...in.dll

windows11-21h2-x64

1

data/app.so

windows10-ltsc_2021-x64

3

data/app.so

windows11-21h2-x64

3

flutter_windows.dll

windows10-ltsc_2021-x64

1

flutter_windows.dll

windows11-21h2-x64

1

msvcp140.dll

windows10-ltsc_2021-x64

1

msvcp140.dll

windows11-21h2-x64

1

permission...in.dll

windows10-ltsc_2021-x64

1

permission...in.dll

windows11-21h2-x64

1

url_launch...in.dll

windows10-ltsc_2021-x64

1

url_launch...in.dll

windows11-21h2-x64

1

vcruntime140.dll

windows10-ltsc_2021-x64

1

vcruntime140.dll

windows11-21h2-x64

1

vcruntime140_1.dll

windows10-ltsc_2021-x64

1

vcruntime140_1.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    exloader-source-code-main.zip
  • Size 22.2MB
  • Sample260717-p22aeabv3p
  • SHA256 407f82aecf99f3747902d87bb9677c618fff76957c56dd3bb3a438f557cb1e3a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
persistenceransomware

Malware Config

Targets

    • Target
      ExLoader.exe
    • Size 201KB
    • SHA256 1fcf4b68db689adea8376e1935ba62c33dc34325ae8e74caa7ba7914aaefe437
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    persistenceransomware

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      audioplayers_windows_plugin.dll
    • Size 195KB
    • SHA256 7816f884fc173375e50dc5f0551aa020e45f22bc9a1c474dc0b1806d23ae13e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      data/app.so
    • Size 19.8MB
    • SHA256 d3c579244910b63c9b464724ab69f543775ab14b0eee84acda46d84fe4dde5c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral5behavioral6
    • Target
      flutter_windows.dll
    • Size 18.2MB
    • SHA256 f305282174da15723cee0913d805db06accb0b0de513fbd313affc9b173353ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      msvcp140.dll
    • Size 559KB
    • SHA256 1e57a6df9e3742e31a1c6d9bff81ebeeae8a7de3b45a26e5079d5e1cce54cd98
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      permission_handler_windows_plugin.dll
    • Size 115KB
    • SHA256 3f36f8c049058212d57341d539117e2e50a72bb5ddb2c8a5f585592b9675dca1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      url_launcher_windows_plugin.dll
    • Size 94KB
    • SHA256 20ef9d607bcae7ad12fafae13cad5e94e87e2a0b5aef6af1a2c5e9bc4df09e92
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      vcruntime140.dll
    • Size 116KB
    • SHA256 a06c9ea4f815dac75d2c99684d433fbfc782010fae887837a03f085a29a217e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      vcruntime140_1.dll
    • Size 48KB
    • SHA256 6d3a6cde6fc4d3c79aabf785c04d2736a3e2fd9b0366c9b741f054a13ecd939e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v16

Tasks