home

exaax8mluc66kkt.rar.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download694.mediafire.com and multiple other hosts.
MD5:
43fc36cb4442ad80cee6b4fec99b0e02

SHA-1:
647e1fe3e4f02c1542e6d2517ccf756b9b6222e7

SHA-256:
b8409a0ff2465ebdae7f9b993f292d2bf730494be0f8d8b321b1dcffb41170f3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:55:01 PM UTC  (today)

File size:
1 MB (1,075,973 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\exaax8mluc66kkt.rar.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:A0eBlsdbxqMxrTG77E0UTXHze+JFZs4ijhBlesZiA:veBl+0MxX5e+JFZ1KZeo

Entry point:
52, 61, 72, 21, 1A, 07, 00, CF, 90, 73, 00, 00, 0D, 00, 00, 00, 00, 00, 00, 00, CF, B6, 74, C0, 90, 39, 00, D1, 00, 00, 00, 0C, 01, 00, 00, 02, 7A, 80, 1E, 31, 9C, 76, 3C, 46, 1D, 33, 14, 00, 20, 00, 00, 00, 44, 52, 4F, 49, 44, 34, 58, 5C, 23, 20, 4C, 65, 69, 61, 20, 23, 2E, 74, 78, 74, 00, B0, 53, 27, 92, 0D, 99, 14, C8, BE, 11, 37, B2, 3C, 1E, BC, 04, 18, C7, 4A, EB, A5, 6A, A4, 4A, 51, 29, 46, 2E, 96, 29, 08, 9A, 14, 18, 81, 18, F4, 26, 47, 95, 3A, 91, 42, 92, D6, 2A, 3C, 27, 34, FA, 64, CF, FD, 3F, E4...
 
[+]

The file exaax8mluc66kkt.rar.exe has been seen being distributed by the following 7 URLs.

http://download694.mediafire.com/8t20yb6d2c3g/.../DROID4X.rar

http://download1604.mediafire.com/tlwdghcfnyng/.../DROID4X.rar

http://download1049.mediafire.com/i29ncooosuvg/.../DROID4X.rar

http://download1604.mediafire.com/q252lifypesg/.../DROID4X.rar

http://download1777.mediafire.com/vsaduk330h9g/.../DROID4X.rar

http://download1025.mediafire.com/45rbcva9l18g/.../DROID4X.rar

http://download1025.mediafire.com/p0hkup1vtxbg/.../DROID4X.rar

Scan exaax8mluc66kkt.rar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.