504f3d2f6ea580e1ae0fc5560f17c10bd81a638187f2a7f7caad9fcf29a60e38

Target
Exodus-Fake-Balance-main.zip
Size 1.9MB
Sample250809-1s1hasynv8
SHA256 504f3d2f6ea580e1ae0fc5560f17c10bd81a638187f2a7f7caad9fcf29a60e38
MD5 1f84bb2591e722c5cd40a34f3bae395b
SHA1 2908f178017236b994a7811011c2c8f20f02523a
SHA512 f2cf69fe4d25e5e72dc13fa96197c973b58eaaa3048e27f44442682129db92fc58afee589797448be754bfe903d5f1aaff05f2aae4894315555be1d273f40593
SSDEEP 49152:CvD4otuxaweQOje19byM3yQFqYE/klW7AVS6lvWYZ:C8iuReXCGM39Fq9/0L5H
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Exodus-Fake-Balance-main/CompositionScroll/CompositionScrollContentPresenter.cs
- Size 38KB
- SHA256 d629d7d758107e69e1cf5135e6415663827471fc457384602e6d1da4c6a3114d
- MD5 099e4695b92b8098bd501672cb59b845
- SHA1 58b5c278090b07c92ed25bbc6253df34c158459c
- SHA512 beaae2db06fdb0ba5ce20baf774918529e9b28ec84efd5441dc0dc3ca698e954abaa1f1a962d0137858df2bf5ff25a8ef51a5c1a65add827bd9474be09ec8e07
- SSDEEP 192:vFDpnFh/K8GNona0cYdJS6korFj4Hw88i62LyiE0DC6qTe213uBuw6Gu5xruSzte:vpJGNohc1wniE0GRDr8YwkDk
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

discovery execution
behavioral1 behavioral2
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/Factory.cs
- Size 784B
- SHA256 d5f6f11a0ffdc829e9f208201797d6937900dce0d32189573f7ac43946bfcc6d
- MD5 ff9a4e70768a8b4bee73bbe23e878979
- SHA1 5e73f50d5cb673fc153e81b8354e304a7a3db27a
- SHA512 37726b99be2bedca2f0e007b73e958cdad71431789075f52d3e6cbcdbc01eac2e18f87cc6ee92197d7cc30c17bbd3c44fa17034f004f1771cd2a31513c95ef76
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/InteractionSource.cs
- Size 6KB
- SHA256 70b8efa632b10b28bbaeaaa352ad0b913869df935c64a63c4d31e2d146d452d3
- MD5 dc274fddf20802d8f58f083ac2c77896
- SHA1 94b9e7041d6be55073bf70bd425f461f376debc1
- SHA512 91b46e8524d2160709627407523b323a136aeefe8ed42fd3cd3eb2f8ec06caec0c2402fe9c337ac53884be8c9f6fdc329648f3fb921d339f73451ae88e4a503d
- SSDEEP 96:t01aBXFiVi67Df3UC0ljO7IGgxc7yb6fOYRlFiF9cb:eSszjYjlpp6f7lFiFmb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/InteractionTracker.cs
- Size 7KB
- SHA256 e7d2cf3a53aafc830b295ebc76960f9e037cb2b55fe08f052cfc4de12685b69a
- MD5 5de38fef328d8904bf5d8455b474c313
- SHA1 5bf7d767aa6f44f1adafdaa27bd9a3ed1ba43565
- SHA512 3e353068c3c585a3786ebadc20576e4c4933820083e6d451a3235d48e9fc11a26aa373233d6a3cd43b2222bc175162c636cca4b8bbdddfeeb16e7715c3900e6b
- SSDEEP 96:Cj4YVSxtTS+3YX96xUtcWV2mr5Sqykj5+Aicur7luZ5wCZ5H2S:t0Sxr3YXysseP
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/ScrollPropertiesSource.cs
- Size 1KB
- SHA256 d9bdbe655a7a9b81763a75878a1c9c2250aa3c4a14ac9dcc8179671cad94cc46
- MD5 41ebd0a04997bceabc308a3851f4513e
- SHA1 7347c25293e394ce8cccca5071a09bfb1315328b
- SHA512 5a42392fb4975644d747862775cb45e5ff3ea6f0589962bbb0f6fa791ea2f3195db32185d59b83cf805d76d5d69ad916cd939ca48971511816b4538d35217c7a
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/Server/Scroller.cs
- Size 5KB
- SHA256 8cda5f7ed732ec526fb3db2307e127338d6cf0fdbd58d73b06849f38a8c15f90
- MD5 45a88924d051df3bfc29186260894587
- SHA1 74400d863660de7999333559c9d7feb8f9bef2e1
- SHA512 965c80bc61348f6a5797f43330bcab60f53b407fd8a77c0a4971623f24761d9078222694d4aaffe68cdf932284ed50bdbff060b00bb374150d97d97f63e9e781
- SSDEEP 96:tKcA1mtc/3PDRAp3n6s10MI1N9R1PX6S9R1Plud1P/BTw9qTb:JAAi/3LRA56mnI1Nt6IfABBEATb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/Server/ServerInteractionTracker.cs
- Size 9KB
- SHA256 e0f20e50406dd48426e988ab6514905f2e99b8bd490d5553d6392a7c5e7d4b07
- MD5 5b150d9fc2cf842c57cd39f296069b9b
- SHA1 727d12dc5d29656ce90a5ba6f182a5697ceb92e9
- SHA512 ffe2d6277c711a2072f4b0d072a99882d0d41350f1a2ae1197c4927da52b8737272e7cbd0c3addc67a3bb06d152511e14ca5ee9966698d417ffe68856fc39ffd
- SSDEEP 192:TIuZqN5ohUHCyMdKXSsjizh/C56acb9jTQ7Tb:CL3/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Exodus-Fake-Balance-main/CompositionScroll/Interactions/Server/ServerScrollPropertiesSource.cs
- Size 2KB
- SHA256 b07a192d4db49adb46117574169d10ea95f58c4b7969896b8c859406e672e2b3
- MD5 ef8cd31a940d2bffbbd26cee16f788c4
- SHA1 7a8d6eed332a84053383124523cd2e1f180b2e14
- SHA512 658ee0e5f61639176084661040037cbe1bfd02c67b2dd52e2a22898520cae502b663fa227802e7f8cffafaef3858c6c5bca80e5a471f47484558f7928b77fddd
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Exodus-Fake-Balance-main/CompositionScroll/VirtualizingStackPanel.cs
- Size 34KB
- SHA256 9cc7a1d052ccaeab7b6e676fc099b7d991e11bc1cfcd38da9796df4c5338d694
- MD5 51d8f6ec5c7c114aae3b066f6bb78d7d
- SHA1 11b41d08c2d1abd5e332e36336cc7bbb09a9f553
- SHA512 07274d95d9cac6a5e1cfc04b7a4c9a58deb8ab5f6d96d785aa52a092b5591f6d663e9a0d27523f207eabb87cfb189c74e541565c0fd7f07fcd557b46d358eaca
- SSDEEP 768:trJZcwkS+8h4AedgUHPAJd1rZNp79GrAtx2bmANfB+GbWIw4LRQoPXMGjkwTbd+0:JJZcwkL8h4AedgUHPAJd1rZNp79GrAtu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Exodus-Fake-Balance-main/Exodus/.history/Services/DataBaseService_20240504040350.cs
- Size 3KB
- SHA256 7f4d49c698cac94754d55c84884bec57f8c410690524321018a84dafc53267a4
- MD5 ec3dd94aa7f5c87693058ebe157e28a1
- SHA1 815214641bd587402ada733a6463dc16e2c41c98
- SHA512 013b2546349b7d497e03a13188eb774f8c3871c217f4eaa8e55238fb5426923f346ec09f10b018c26af10648db3b506441782d408b475f41623ebde5be88714d
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Exodus-Fake-Balance-main/Exodus/.history/Services/DataBaseService_20241229005709.cs
- Size 3KB
- SHA256 f3a38c164425c19ba35a38f6c131a2f8561a7432581c93dc92eef284d635c7e9
- MD5 03114eba6d0b2c75957c190b7b9e0b7a
- SHA1 420f7229f019e0d6c7c5cc97f61de98aa313f223
- SHA512 0efda6fbc5c39781f2cb1f93190a827350b0b4e1d9f707343d904eddbff54c3f80a625bd33ca7e9e237a30f4d63613ef50314cd01f0f2876e0eeea56aaf1ebbe
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Exodus-Fake-Balance-main/Exodus/.history/Services/DataBaseService_20241229005726.cs
- Size 3KB
- SHA256 b9ad7b36e241aae60e5bbbc864a7c095d7aa196d0a8912fcac583ff7666bd279
- MD5 b2956052716ce161703322e8c87a2983
- SHA1 2b6d72eb6568d27651e23cfb4dc3ce65ba729f0d
- SHA512 ecc124003a4cff72324323ff50120b876e8ea0aba806d6e6a1a3519cf7c098288c645f6258a037a47f400b63c06f17887622dd5e0bc080196de84a64599c41e6
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Exodus-Fake-Balance-main/Exodus/.history/Services/DataBaseService_20241229010127.cs
- Size 3KB
- SHA256 88617722388cf4a9c3a68df48f54df677830cb2056cb0aaeb0d117c0f5b4eec5
- MD5 f6076de9bb1c40ff2d756829af5cdcde
- SHA1 d5fb6655e010260141ef3b891b2112354e912d8a
- SHA512 81115994cd6c16ecd8f1d1c5f8bbf01e0f2debcbdb77c8971d106d665aa8e92ce71eaedffae04778630a365858bcaf9dacf4482a7f007dc4657170428490b847
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Exodus-Fake-Balance-main/Exodus/.history/Services/DataBaseService_20241229010139.cs
- Size 3KB
- SHA256 b9ad7b36e241aae60e5bbbc864a7c095d7aa196d0a8912fcac583ff7666bd279
- MD5 b2956052716ce161703322e8c87a2983
- SHA1 2b6d72eb6568d27651e23cfb4dc3ce65ba729f0d
- SHA512 ecc124003a4cff72324323ff50120b876e8ea0aba806d6e6a1a3519cf7c098288c645f6258a037a47f400b63c06f17887622dd5e0bc080196de84a64599c41e6
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Exodus-Fake-Balance-main/Exodus/Assets/Resources/Icons/Icons.axaml
- Size 9KB
- SHA256 45e48092227e1808b64fa242cc8cbcc0659b712a86390cbf38ef53797368c91b
- MD5 1c6fbed36d345e97aad4abc694818654
- SHA1 7ba42c2045385166929912744c8aa19e46551d70
- SHA512 18fd39251ec0668d89f8044a304c9376c0d601bf8c22ac9b880fa196900ee5168bcded191dacc17cbbf89a3ad728b25b2d8267d784db4a860e377f03ca61f028
- SSDEEP 192:ccqMpHDgZBMO20/dN7P4Cpces/b42Ft468x5+N7IwPW:tqMpK2MNz5snt3FC
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
behavioral29 behavioral30
- Target
  Exodus-Fake-Balance-main/Exodus/Exodus.csproj
- Size 8KB
- SHA256 9cfe2ad755616988132f779898b51d2449aaa1241d90305d93e2fdfe6a272096
- MD5 56cad5798333a2fefc5e2832f26c0617
- SHA1 e5a0c56bf117ed8ff2923c8967c84765bcc93af3
- SHA512 91d063194a80a3dd5d99e04448f47869556dc00378579329d56b40cdc4f060eb3739e30771961267dbd4b76b50e8f3eb6ec2749268556489297df00a1f3262e8
- SSDEEP 192:y55obwABbH3DM9FZ5rzqRu89i9nxb98CUJA2iqS:y5uB3D6Vw/A93EJUqS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32