Overview
overview
8Static
static
5exodus/Exo...er.exe
windows10-2004-x64
8exodus/Exo...er.exe
windows11-21h2-x64
8exodus/cs/...es.dll
windows10-2004-x64
1exodus/cs/...es.dll
windows11-21h2-x64
1exodus/cs/...es.dll
windows10-2004-x64
1exodus/cs/...es.dll
windows11-21h2-x64
1exodus/cs/...es.dll
windows10-2004-x64
1exodus/cs/...es.dll
windows11-21h2-x64
1exodus/cs/...es.dll
windows10-2004-x64
1exodus/cs/...es.dll
windows11-21h2-x64
1exodus/de/...es.dll
windows10-2004-x64
1exodus/de/...es.dll
windows11-21h2-x64
1exodus/de/...es.dll
windows10-2004-x64
1exodus/de/...es.dll
windows11-21h2-x64
1exodus/de/...es.dll
windows10-2004-x64
1exodus/de/...es.dll
windows11-21h2-x64
1exodus/de/...es.dll
windows10-2004-x64
1exodus/de/...es.dll
windows11-21h2-x64
1exodus/es/...es.dll
windows10-2004-x64
1exodus/es/...es.dll
windows11-21h2-x64
1exodus/es/...es.dll
windows10-2004-x64
1exodus/es/...es.dll
windows11-21h2-x64
1exodus/es/...es.dll
windows10-2004-x64
1exodus/es/...es.dll
windows11-21h2-x64
1exodus/es/...es.dll
windows10-2004-x64
1exodus/es/...es.dll
windows11-21h2-x64
1exodus/fr/...es.dll
windows10-2004-x64
1exodus/fr/...es.dll
windows11-21h2-x64
1exodus/fr/...es.dll
windows10-2004-x64
1exodus/fr/...es.dll
windows11-21h2-x64
1exodus/fr/...es.dll
windows10-2004-x64
1exodus/fr/...es.dll
windows11-21h2-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
159s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/04/2026, 02:33
Behavioral task
behavioral1
Sample
exodus/Exodus Installer.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
exodus/Exodus Installer.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
exodus/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
exodus/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
exodus/cs/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
exodus/cs/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
exodus/cs/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
exodus/cs/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
exodus/cs/Microsoft.CodeAnalysis.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
exodus/cs/Microsoft.CodeAnalysis.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
exodus/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
exodus/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
exodus/de/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
exodus/de/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
exodus/de/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
exodus/de/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
exodus/de/Microsoft.CodeAnalysis.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
exodus/de/Microsoft.CodeAnalysis.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
exodus/es/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
exodus/es/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
exodus/es/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
exodus/es/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
exodus/es/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
exodus/es/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
exodus/es/Microsoft.CodeAnalysis.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
exodus/es/Microsoft.CodeAnalysis.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
exodus/fr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
exodus/fr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
exodus/fr/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
exodus/fr/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
exodus/fr/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
exodus/fr/Microsoft.CodeAnalysis.Scripting.resources.dll
Resource
win11-20260130-en
windows11-21h2-x64
General
- Target exodus/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- Size 15KB
- Sample260429-c2b93aby5p
- SHA256 1fcb3bae1ae22df51b857d3b1d31b7582fb18d5f1c6870cb77c41a05a1be3f6d
- MD5 cbef52b59578e2959d25c8c2a377ced3
- SHA1 a597c7f7090c9aaada391f0fcac8f300669dac60
- SHA512 99f0d950e5f7aca03ab088fb87b6765bbbdedf3a0530bdc50c4e2056d66e7080fc7dd42eb775072513ba231880b6257e11aa3db05ed7b2e18c5e6edbb4919214
- SSDEEP 384:4rPIB0WkBfQWPddHRN7twuAzXulGswDuSt:YPIIRbwzrz
- TLSH T1F3723A929BBC8503EDB32EB14670E5437F3CA396A920936A344DE6590F537C1DB24A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\exodus\de\Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll,#11⤵PID:3108
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1032