c8901417cce1b454b45d22e476353edab66438ee6231b6e69f3ad44d8e2400d8

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 02:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Exodus.exe
Size 1.1MB
Sample260701-ctfbracx3n
SHA256 c8901417cce1b454b45d22e476353edab66438ee6231b6e69f3ad44d8e2400d8
MD5 479f4b961e25f5adfcda2937eeb99e58
SHA1 49ab50c68a8a4381a6182955e771972e27184291
SHA512 dc3a00d729a139c9aec8b2aba7646001c748ca3275046d789bc15fcea87828723b54ce5cac36f8627e60982da6c37d255c94dc892bc22ec23239bafeac01b5a4
SSDEEP 12288:EZ+OE4MmD6/Oyspc5EEBBBHGBgzGerwGrlvPqItNquB:Ecb4M06WpoPrwyvP3f5
TLSH
T198357C83EBA385D8C156C8B5534FF137F9627C8E4A157196ABC41E633E67B64E22CB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Exodus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Exodus.exe

C:\Users\Admin\AppData\Local\Temp\Exodus.exe
"C:\Users\Admin\AppData\Local\Temp\Exodus.exe"
1⤵
- Checks processor information in registry
PID:1508

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads