General
- Target ExLoader.exe
- Size 22.3MB
- Sample260729-k7vycsdj7v
- SHA256 3d0d98eda64f6ba59af31c9f5801ad836f045be18f4a15fadc6030299aac78f5
- MD5 384a2621039e091daaa5377fcf7b3a19
- SHA1 55cce16a2b4da0e7bdbe54620cd4ab443a7881a0
- SHA512 ed58b607b12c285d7221985cf1f6902f6ff7f525e46b409fda2a7eb7246da2901f6ca2f76c6c9bf042e1921e0c4564a1328cb286ccfea0a4695c70c8db0fafdd
- SSDEEP 393216:AXbwfBSWcRQovWGIYFCRwFbGgYU+WsW7PG/SnRVe3iZtUPihP/j+Wi7Oqer+eiQC:AX8NcRQoGY8e+WWSc+uPihPr+WilDeW4
- TLSH T1FF3733C0ED9E736AE877F8F3B041010062199BE551DCD93B6F9D47CCC895A58983B92E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExLoader.exe
Resource
win10ltsc2021-20260513-it
6 signatures
300 seconds
Malware Config
Targets
-
- Target ExLoader.exe
- Size 22.3MB
- SHA256 3d0d98eda64f6ba59af31c9f5801ad836f045be18f4a15fadc6030299aac78f5
- MD5 384a2621039e091daaa5377fcf7b3a19
- SHA1 55cce16a2b4da0e7bdbe54620cd4ab443a7881a0
- SHA512 ed58b607b12c285d7221985cf1f6902f6ff7f525e46b409fda2a7eb7246da2901f6ca2f76c6c9bf042e1921e0c4564a1328cb286ccfea0a4695c70c8db0fafdd
- SSDEEP 393216:AXbwfBSWcRQovWGIYFCRwFbGgYU+WsW7PG/SnRVe3iZtUPihP/j+Wi7Oqer+eiQC:AX8NcRQoGY8e+WWSc+uPihPr+WilDeW4
- TLSH T1FF3733C0ED9E736AE877F8F3B041010062199BE551DCD93B6F9D47CCC895A58983B92E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL