General

  • Target

    exodus-windows-x64-24.37.2.exe

  • Size

    222.5MB

  • Sample

    240925-x4kz7stanr

  • MD5

    616deee795c2cab43b331b9911a1324d

  • SHA1

    220259576ffbf3bdc2c82f5998cb9b804ed10b49

  • SHA256

    eab3e3b6e8b995b1e61a855aced2ad720125cdeed905488df69935ac0797a61a

  • SHA512

    7695d888de5bf4af0f33eec6c5f3ff9c540d768e2fa48a2a42b97061ca3a3acd425bab553a67a291deb8e1f4dadc5e35a68861b1156b510b7c85d469694cb90e

  • SSDEEP

    3145728:3QrwAI2n0KjGajGyFv7PAQq7ZUCQ4ljRjE1XzZl/LUCrMarnqWRcVMWrvt7lOZ4Z:grwvhaGpYA7if4rA9zZhLqeYpt0Z4gQz

Malware Config

Targets

    • Target

      exodus-windows-x64-24.37.2.exe

    • Size

      222.5MB

    • MD5

      616deee795c2cab43b331b9911a1324d

    • SHA1

      220259576ffbf3bdc2c82f5998cb9b804ed10b49

    • SHA256

      eab3e3b6e8b995b1e61a855aced2ad720125cdeed905488df69935ac0797a61a

    • SHA512

      7695d888de5bf4af0f33eec6c5f3ff9c540d768e2fa48a2a42b97061ca3a3acd425bab553a67a291deb8e1f4dadc5e35a68861b1156b510b7c85d469694cb90e

    • SSDEEP

      3145728:3QrwAI2n0KjGajGyFv7PAQq7ZUCQ4ljRjE1XzZl/LUCrMarnqWRcVMWrvt7lOZ4Z:grwvhaGpYA7if4rA9zZhLqeYpt0Z4gQz

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks