General
- Target ExitLoader.exe
- Size 3.4MB
- Sample260824-r7nbvahn51
- SHA256 06abac11b72943a248e79c48638a4d6fd9f72fa0d2a2ec04148b4ee379c6c471
- MD5 bee5f614e70ec3fff4173cf9486bbeb3
- SHA1 00e6920a491d223bada45b28a1ba6eefb19d30b6
- SHA512 5a66d6e7144f535a860cbef9d085edd7a06d526f3c80bd3a9cf42343b219c79abec5adb946d59eb8d97814b002b1ad6fa03d5a0d93a8bdb8ed29438e1e44a39c
- SSDEEP 49152:NAPktwlx0AOaGh+ENqF/KOXHkD3++S4CnFcRPzi6YsziMhpCVjiVKr7e214YMT+:NAPktwlx0AOaG0VDEDkadDnjCVjYk5My
- TLSH T1CFF58C5AE7A941B8C1A3C47D891A5013FA7238421775EAEB52F088565F37BE02F3E770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExitLoader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ExitLoader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ExitLoader.exe
- Size 3.4MB
- SHA256 06abac11b72943a248e79c48638a4d6fd9f72fa0d2a2ec04148b4ee379c6c471
- MD5 bee5f614e70ec3fff4173cf9486bbeb3
- SHA1 00e6920a491d223bada45b28a1ba6eefb19d30b6
- SHA512 5a66d6e7144f535a860cbef9d085edd7a06d526f3c80bd3a9cf42343b219c79abec5adb946d59eb8d97814b002b1ad6fa03d5a0d93a8bdb8ed29438e1e44a39c
- SSDEEP 49152:NAPktwlx0AOaGh+ENqF/KOXHkD3++S4CnFcRPzi6YsziMhpCVjiVKr7e214YMT+:NAPktwlx0AOaG0VDEDkadDnjCVjYk5My
- TLSH T1CFF58C5AE7A941B8C1A3C47D891A5013FA7238421775EAEB52F088565F37BE02F3E770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE