Resubmissions

03/08/2026, 22:16

260803-165n6sgg337

03/08/2026, 21:48

260803-1n3f4agc737

General

  • Target
    ExoENV_0.3.2_x64-setup.exe
  • Size 10.2MB
  • Sample260803-1n3f4agc73
  • SHA256 25a43acc76a8189b0bd167e8dca785b51aa696890d53e1adb4f45f965ba0b23e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ExoENV_0.3.2_x64-setup.exe
    • Size 10.2MB
    • SHA256 25a43acc76a8189b0bd167e8dca785b51aa696890d53e1adb4f45f965ba0b23e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks