Overview

overview

10

Static

static

10

Exodus.exe

windows7-x64

10

Exodus.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Exodus.exe

  • Size

    80KB

  • MD5

    4f1beb3be76b26f989e9b67658745b61

  • SHA1

    559883977039a3645ac8477249de226a67a46bd9

  • SHA256

    68a0feabf94c619927c5f8e524043a0bb0fb9c940b905482d1fe2d8a7e1b8491

  • SHA512

    ce78747dd487e6397cb7185b1eef4799c3f1c14e36c558d4de4bced9c58a6aab5eb2386a1e424e45beef66f3d3c1a8b00f0aab6e31e8d7e00f55f54d5c89a9da

  • SSDEEP

    1536:2uBw1TXMo28ddxnvb27sA3Tl5dRaOd5fJefKmzl:2uBkTXMo28ddxnvb27fl5yO3hCKsl

Score
10/10
ratexodusasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Exodus

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808
Mutex

NSe2vdRAuvxN

Attributes
  • delay

    3

  • install

    false

  • install_file

    powerhouse.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Exodus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections