General
- Target ExclusionInstaller.exe
- Size 31.1MB
- Sample260824-3yda3az1ds
- SHA256 4c7d143a1e6ccfbd4ed0b9c53d9f66591f3dcb17b6a9f3ca1393a2e422b107d5
- MD5 f8ae0befa6c233989026c3b61f78e0f6
- SHA1 037b063746f4371b97c9b3d3be3b7adf2a173b6d
- SHA512 f7378d719d76d765726094dc34ea300ca1fea0270589d23df6c10a53694ac005580e15d951a32fd100cf1df95eaf2923b8219a395a39b5d8c909effc9a511768
- SSDEEP 393216:1TVS3jdHP2ZW/cvHkWn0ra03iQKCJD7fk8sjBsprDTpM8QYTazdD9IdEXLTsCLqz:14hvYeijIdn81+ZeYTaxckrW5IDs0u
- TLSH T1A567331F25618557CB2BE33D95B2F6F6A20E424A7D8A5D95C318D31CFF03ABA308469C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ExclusionInstaller.exe
Resource
win11-20260513-en
9 signatures
30 seconds
Behavioral task
behavioral2
Sample
app/7za.exe
Resource
win11-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral3
Sample
app/ExclusionLauncher.exe
Resource
win11-20260513-en
3 signatures
30 seconds
Behavioral task
behavioral4
Sample
app/JavaLaunchTests.exe
Resource
win11-20260513-en
0 signatures
30 seconds
Malware Config
Targets
-
- Target ExclusionInstaller.exe
- Size 31.1MB
- SHA256 4c7d143a1e6ccfbd4ed0b9c53d9f66591f3dcb17b6a9f3ca1393a2e422b107d5
- MD5 f8ae0befa6c233989026c3b61f78e0f6
- SHA1 037b063746f4371b97c9b3d3be3b7adf2a173b6d
- SHA512 f7378d719d76d765726094dc34ea300ca1fea0270589d23df6c10a53694ac005580e15d951a32fd100cf1df95eaf2923b8219a395a39b5d8c909effc9a511768
- SSDEEP 393216:1TVS3jdHP2ZW/cvHkWn0ra03iQKCJD7fk8sjBsprDTpM8QYTazdD9IdEXLTsCLqz:14hvYeijIdn81+ZeYTaxckrW5IDs0u
- TLSH T1A567331F25618557CB2BE33D95B2F6F6A20E424A7D8A5D95C318D31CFF03ABA308469C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target app/7za.exe
- Size 802KB
- SHA256 f00836a63be7ebf14e1b8c40100c59777fe3432506b330927ea1f1b7fd47ee44
- MD5 8f57948e69c82bf98704f129c5460576
- SHA1 33e277af0cea397252c23d310961f803be5cdf2b
- SHA512 628cf68c9436721b874a87e1bff711d3b6fe5d4bd9b02411890059a7d32078a9592fc48e6e53761d17bdbd72c5eb66593b841470157a3e8b38f0b67525d73bc9
- SSDEEP 24576:L48I9t/zu2QSM0TMzOCkY+we/86W5gXKxZ5:Le71MzuiehWIKxZ
- TLSH T1C9059E22BAE5D07BD2421132CA1C7BF591F9976D0B2048C763808F6D7B359D1DA3AE1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/ExclusionLauncher.exe
- Size 4.1MB
- SHA256 34c16cc79c65c529a77ed964b13f1256fbf37b25cf872a32ab1a785d09a6628f
- MD5 1332a922d447bff946d82db2784a62eb
- SHA1 2ffa5ca432e3aa9ac2f9e30ba8280a43de03bb84
- SHA512 37e45ab399cbd375172e5fc23ffdaa34e21030361a05b99b6db7f7e08c8fcd159b4dce56cda345a2376a5d2d2225b1f73553357117e695f91ba5a7b0dc0d3296
- SSDEEP 49152:GL4WpiIXGIRXtrlI3DdepGzaSnxAmQsBj8W4zddvnmpeBC2qMwjga0hvK:dOXNeEUzF2m9j8fRdvnl42qM/y
- TLSH T17C169D3F37A482E5D0B1E175CEA68663F6B274206F9157EB20159E2D0F777822E3D218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/JavaLaunchTests.exe
- Size 32KB
- SHA256 ebee2980db595c77faba28b3dd3688a09dc585084dd7d46e2ff333e55f71f91b
- MD5 eba470c3407040e1a3b48f8386725d5e
- SHA1 a46abe9d852c1bd6d8f295e7006a05ada24ae05f
- SHA512 71484d88877651e18c1527ab0ff95076fb89d16467b96379c2d6d481bc87b12891bd1024ee16b3422c887d222a0d8161f92b5f207435ef584fb55cb22d850866
- SSDEEP 384:E3Nw62yqS343KSC0uAmt+7ZXIH1fjX3rSIEudXSHSo70RZ8wHJ23zSkaoz:E920ky01mGZXyt3dISoeZb43uboz
- TLSH T139E24B7F767400E4F66AD07AC7675426D6B2B44217119EFF03928A3E0E37A913E39A0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10