General
- Target larpexodus.exe
- Size 96.0MB
- Sample260908-2hf7cayema
- SHA256 b350924ace363c1d4980aa1d5022d48f4591df1c701d32c5147428273dfa56a8
- MD5 d505883d927ca1e4a211c3bae9cd963f
- SHA1 b42628b8deb1168c48693dbabf1d6fa04aa9df2c
- SHA512 255e1c5bee0be5280cee8ffff08ac05fe419dba85a591b2a98f3e7c0e5029bba8dc91a25acba2454b67bf7e41cbb376447cea524dfda8795b552668ce6f12b01
- SSDEEP 1572864:NuyFfaRGpG48TwYqtSqF+1GohGuESDQ+c/dUxIlX+jHj00EKV0X7NzvLWCnbo97:NuyZa04wYoFvuE4Nq6IlX+jHj09oCns7
- TLSH T1CC283391A6AC5014ED7DFC76F36CF36F212D8E0E4C0085AB05F61134BBA06B2B65EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
larpexodus.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
larpexodus.exe
Resource
win10ltsc2021-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
larpexodus.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
larpexodus.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target larpexodus.exe
- Size 96.0MB
- SHA256 b350924ace363c1d4980aa1d5022d48f4591df1c701d32c5147428273dfa56a8
- MD5 d505883d927ca1e4a211c3bae9cd963f
- SHA1 b42628b8deb1168c48693dbabf1d6fa04aa9df2c
- SHA512 255e1c5bee0be5280cee8ffff08ac05fe419dba85a591b2a98f3e7c0e5029bba8dc91a25acba2454b67bf7e41cbb376447cea524dfda8795b552668ce6f12b01
- SSDEEP 1572864:NuyFfaRGpG48TwYqtSqF+1GohGuESDQ+c/dUxIlX+jHj00EKV0X7NzvLWCnbo97:NuyZa04wYoFvuE4Nq6IlX+jHj09oCns7
- TLSH T1CC283391A6AC5014ED7DFC76F36CF36F212D8E0E4C0085AB05F61134BBA06B2B65EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL