Overview
overview
6Static
static
3ExLoader_I...er.zip
windows10-2004-x64
1data/flutt...st.bin
windows10-2004-x64
3data/flutt...t.json
windows10-2004-x64
3data/flutt...CES.gz
windows10-2004-x64
1data/flutt...t.json
windows10-2004-x64
3data/flutt...DE.wav
windows10-2004-x64
6data/flutt...EN.wav
windows10-2004-x64
6data/flutt...RU.wav
windows10-2004-x64
6data/flutt...er.wav
windows10-2004-x64
6data/flutt...ss.wav
windows10-2004-x64
6data/flutt...er.wav
windows10-2004-x64
6data/flutt...ss.wav
windows10-2004-x64
6data/flutt...er.wav
windows10-2004-x64
6data/flutt...ss.wav
windows10-2004-x64
6data/flutt...er.wav
windows10-2004-x64
6data/flutt...ss.wav
windows10-2004-x64
6data/flutt...on.wav
windows10-2004-x64
6data/flutt...me.gif
windows10-2004-x64
3data/flutt...ay.jpg
windows10-2004-x64
1data/flutt...nk.jpg
windows10-2004-x64
1data/flutt...er.jpg
windows10-2004-x64
1data/flutt...v1.jpg
windows10-2004-x64
1data/flutt...v2.jpg
windows10-2004-x64
1data/flutt...ay.jpg
windows10-2004-x64
1data/flutt...in.jpg
windows10-2004-x64
1data/flutt...ar.jpg
windows10-2004-x64
1data/flutt...en.jpg
windows10-2004-x64
1data/flutt...lo.jpg
windows10-2004-x64
1data/flutt...ay.jpg
windows10-2004-x64
1data/flutt...ay.jpg
windows10-2004-x64
1data/flutt...ay.jpg
windows10-2004-x64
1flutter_windows.dll
windows10-2004-x64
1Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/07/2026, 17:33
Static task
static1
Behavioral task
behavioral1
Sample
ExLoader_Installer.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
data/flutter_assets/AssetManifest.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
data/flutter_assets/FontManifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
data/flutter_assets/NOTICES.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
data/flutter_assets/NativeAssetsManifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
data/flutter_assets/resources/audio/AbominationPissed_DE.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
data/flutter_assets/resources/audio/AbominationPissed_EN.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/flutter_assets/resources/audio/AbominationPissed_RU.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
data/flutter_assets/resources/audio/Csgo_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/flutter_assets/resources/audio/Csgo_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
data/flutter_assets/resources/audio/Fortnite_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/flutter_assets/resources/audio/Fortnite_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
data/flutter_assets/resources/audio/Standard_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/flutter_assets/resources/audio/Standard_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
data/flutter_assets/resources/audio/Steam_hover.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/flutter_assets/resources/audio/Steam_press.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
data/flutter_assets/resources/audio/Windows_notification.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/flutter_assets/resources/backgrounds/Anime.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
data/flutter_assets/resources/backgrounds/CatsDay.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/flutter_assets/resources/backgrounds/Cyberpunk.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
data/flutter_assets/resources/backgrounds/Easter.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/flutter_assets/resources/backgrounds/Fallguys_v1.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
data/flutter_assets/resources/backgrounds/Fallguys_v2.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/flutter_assets/resources/backgrounds/FishingDay.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
data/flutter_assets/resources/backgrounds/Genshin.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/flutter_assets/resources/backgrounds/God%20of%20War.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
data/flutter_assets/resources/backgrounds/Halloween.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/flutter_assets/resources/backgrounds/Halo.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
data/flutter_assets/resources/backgrounds/IceCreamDay.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/flutter_assets/resources/backgrounds/JokeDay.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
data/flutter_assets/resources/backgrounds/LoveDay.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
flutter_windows.dll
Resource
win10v2004-20260513-en
General
- Target data/flutter_assets/NOTICES.gz
- Size 113KB
- Sample260718-v41dsagy8l
- SHA256 351b1f86747e148dae94022110344200da947349832608c9fc4b42b2f7092ccc
- MD5 0cacec7b255bd24b232a88e3cb7f449c
- SHA1 a1295d2b969318b39c4e50deab56c67f76c3e5aa
- SHA512 f65a1a14bcfcd97baf91e886eb20a2fe25dff4c4904fd8b7f3245287ec18b325e30f5dd58f415c7875e0802c54458c748cafe1f3a50dd9f78751b1afef8108e7
- SSDEEP 1536:3OlJ76y8r3AwXUpv/b2ddq6Otz1qjP8DYrhWuLebNsWuf13EBA0nsASoUUhYa4ce:+DgzvXjdGtYmYBLi6f1P0XYlNwxle
- TLSH T135B312C58581377EAB3963CD3AE07529D70C4C4B1A5B4804D0E9DB04A0BB58BEBBE67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3060 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3060 7zFM.exe Token: 35 3060 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3060 7zFM.exe