General
- Target ExoENV_0.3.1_x64-setup.exe
- Size 9.6MB
- Sample260730-trh4ascb42
- SHA256 580b5d8372eb66858bb87707750225a6d4771a453d701254450b2b03defafe95
- MD5 caaf59e26f6d9ec3d00f713b091c399f
- SHA1 94b9b592cffe600873f500cfc47c01aecf364fb4
- SHA512 3deef9655a1697dbee718adc35dfc78cd23b3a4054b708ac6e23280f1a155ac2911d39cb4563707d62575d88e634e4568fa07d51af182470ec3c077152b6ec35
- SSDEEP 196608:t3tR3db2TfWxHUppUTzT2up2DoFw/XQHY1u/CghEbh+:t3tR3+WxHUgrh2DMa+Y1u/ZB
- TLSH T134A63316B8E045A7D6B45FB4F60D270BC71F7FA492D81C8E174482D9E085B33DA3AA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExoENV_0.3.1_x64-setup.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ExoENV_0.3.1_x64-setup.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
app.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
roblox-env.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
roblox-env.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ExoENV_0.3.1_x64-setup.exe
- Size 9.6MB
- SHA256 580b5d8372eb66858bb87707750225a6d4771a453d701254450b2b03defafe95
- MD5 caaf59e26f6d9ec3d00f713b091c399f
- SHA1 94b9b592cffe600873f500cfc47c01aecf364fb4
- SHA512 3deef9655a1697dbee718adc35dfc78cd23b3a4054b708ac6e23280f1a155ac2911d39cb4563707d62575d88e634e4568fa07d51af182470ec3c077152b6ec35
- SSDEEP 196608:t3tR3db2TfWxHUppUTzT2up2DoFw/XQHY1u/CghEbh+:t3tR3+WxHUgrh2DMa+Y1u/ZB
- TLSH T134A63316B8E045A7D6B45FB4F60D270BC71F7FA492D81C8E174482D9E085B33DA3AA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target app.exe
- Size 20.2MB
- SHA256 6ba32c05be63bdc3f50781e9265c16b07f048ceb69449e27824028d28a11a546
- MD5 0067570465937e04398871ecbec4a163
- SHA1 209fb3350976bc287be90ac76fc6896bfe80dacb
- SHA512 7029d9113473f35b5bbdba14f157c54eb1d1787cec21237024a45e6243e81bbbf57d675aafd8742ed6304e9bddc20a2f1e07eb97f39778052b66d544be9d2cd7
- SSDEEP 196608:0ZgYxd/KI3NRqCuVFWoalBDfHRW2PYZ+Ne/RzLtW9OVbr:FY6kqCOFwrHRW2P2/RzLs9OVb
- TLSH T1792707257B5A996CC19AC474834B8A720A7170DB0B39B9FF448496383F6DBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
- Target roblox-env.exe
- Size 15.0MB
- SHA256 42c0a55b346560b67138788f91246653a24d76c3eda54496d7d27a2999140aa5
- MD5 d8ee60282029e221938538b72a5eaf1e
- SHA1 346eb7d055af4dac3383dd8b8f2ee0e6a25a62e9
- SHA512 ca6432d66b93280ccd4c82a8568354da925370bfc8634b881e2c930a55972ce056c6859f907b96acc9234b8a8dbc955a22359867cdd8141dc2080de9b732550f
- SSDEEP 98304:D5FOEHmtNpJrOxd2lJn4pJqOTN7H2TJV9yZCaxsqjHgL5wNJ3mgoA7i+ybvIuDil:yEGvpUE1EjE5wNwfAO5kR
- TLSH T1B4F628057A9B9CBCD56AC8B083474A675E5030CB163ABDFF40D846383FADBA45B39319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10