2a65e79eb7c31d1bf8496c550cec406f86920ad4cd7b23612bf36998979c3364

Sharing

Copy URL Twitter E-mail

General

Target
Exodus.rar
Size 43.8MB
Sample260710-ah45mabt2p
SHA256 2a65e79eb7c31d1bf8496c550cec406f86920ad4cd7b23612bf36998979c3364
MD5 8ae8d2dba988c524bc916335c36cfe29
SHA1 c1b213436507cbc13b88b1b8409bc7acfe36e20f
SHA512 137d6b1dc9e51c0df338392289cef48e6a494aa1adf72431c1c5d9374255eb06aa99e11078e9facdbfb166682c2f25fbef98b158001a09b782989df1d7e17451
SSDEEP 786432:1sK5+IWGQBsEy/grIAGCt0TNflv4QDsBEqjJsmurkBACVG9qbi0f+7:194GQoHHGB5jJi+E9IU
TLSH
T157A73332C7CFBC59E82B536357025BFF7B49499578268D8BA58D44A1C2118BDC2C83AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Exodus/CompositionScroll.pdb
- Size 27KB
- SHA256 40ad679aad8238a62dc381f7e4eb566599ad3d792f82b0c69c39e0ba806c7524
- MD5 d0eb44d4802690a1c29ad347ac628aa1
- SHA1 cc3c068990f10d71ed006b1ac8e50d2fad47db55
- SHA512 6c8bf825123c922b8cd36740152578e3ce32c981ad4d03c6f5349c5e873ac7d0a9c19287714e05594c53f5e0c684ba7d48cbd0c0a2834f3ffc8dd720d806f093
- SSDEEP 384:rLZJ0O+uzRJ/+LvANdpMhaAsAYZ1PK1hP0hHUcBZHF/f3u/ZiRy7C/haFyPTsdW6:n30IzRJWLv2DhHZqmwTrSlKOAIToP
- TLSH
  T183C2E6639398D355C5462533A622C3983738C311AA4ADF36F2D8B365ECDF79406B72A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  Exodus/Exodus.deps.json
- Size 56KB
- SHA256 d7363b9e639658715a38d146e3e9289322fb10a1220e881f6e163aec403b0ca4
- MD5 6ca4a3d09858db7792d8370d0866d39b
- SHA1 beb6284d4c086b12ee1eccfd1e613d755d30451c
- SHA512 3dea240f24be0e1ca32d72e980ef6c0867d49a489fc305726181a53956fff18c5ab1c71510aeafb5524d74e4bd51e22a217e0d0f420b946848ca4f7bc22814bb
- SSDEEP 384:nZG80sg9CEu6j50vbU8RIUg24ZEnO5XunYguL1OK46Ex7iZMkdB16Pjdxjm4wiHX:n880sg5u6Y/IUPXoL1OKZ3dB8TKWME
- TLSH
  T1EA43CD22DA608DA759B66B9224794182F365136F60009DCF38FC248ECF77FA711A5F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Exodus/Exodus.pdb
- Size 58KB
- SHA256 d31b3e4ea9c60358b657b321cda9917330c1ef14ccd2d678f110d42103569be3
- MD5 acc81c5ece2df6d1d99f707997bea54e
- SHA1 049f0c86f2c31fd755549fa3a5ff4db76be1d12d
- SHA512 e7a5e04c5bbec1cb8ba1e64c6df2089d605d4cf396c579f16137ced2ccbc843f37adf767472e371ca4cb1356d4f8a08426f3e18f14ded49c2cd1048ec0f6ac8a
- SSDEEP 1536:CUqGdldHRMeUyGawNnWh+F8iBdKCvczPi/ulw:3JhAaQWFodFgi/ulw
- TLSH
  T17043EA9EF3648662C2D516BE40FBC28EB370C2519706BF3672C0F975AC9AB508F76254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Exodus/runtimes/linux-arm64/native/libSkiaSharp.so
- Size 7.7MB
- SHA256 8c5ec9e51653e7c53154ce9e3eac5acac8b6002b08736866ed2138171ef8ad39
- MD5 98d34a02472fe7275eb1835152d9b643
- SHA1 5e33b2800237d964edc71fc27996c974425badf5
- SHA512 a3e9c7bcfe4f5b1e78c60b7f894b735d0cf97a791e2cd50837bcc1277323240b890b10fdaee14256787cc8acd35ff9d3011e058854b6f058e221d12d416554ca
- SSDEEP 49152:DCFzKE3RrY6EWqtW66q3lcNR4fWmlj8R4MBQINV8F3RHvlkSXrmbbYHSQrz5hKX/:DIzKE3RrY6p6F1kRSWiMOm8tRP/3KXk
- TLSH
  T16786AF58E40CB526EBCAF0BC9E4785C3B63A3895A260C5853533C21BFDC36E496767B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  Exodus/runtimes/linux-musl-x64/native/libHarfBuzzSharp.so
- Size 1.8MB
- SHA256 7bf7f5d9307352cbb504be4c2d371ca0f5ab5ce69a9e0f2c0bcf17cc849be0b7
- MD5 6079fd01b4edcda917e5cdf14785f190
- SHA1 cfad7bce8b68d733c3ed210fd989aa7a167106e4
- SHA512 9bd9b30d164caf9fa42cb4e3f5a01b093af278abe1fe2c137c0bab93b82ff6683538ba9786ed9a9acb33f45cf54204836c788c12513ba69a415bf1cf0e3ab2fa
- SSDEEP 49152:Bxa8F+nqlPO/CCzXtjFWpS1CzU9yaIrAr3pN:d+nqlPOKKXtj2zUAa6AT
- TLSH
  T18E957D46F3E354ECC49AC970421BD123A93578552121ADBBBAD0DB706E13FB02B6DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Exodus/runtimes/linux-musl-x64/native/libSkiaSharp.so
- Size 10.7MB
- SHA256 9e33543bb522862910adbd71d2fd4a1394ceb5c5a9aaea75106a7f16fe826314
- MD5 19d24a02377c6b9db951efc54cd1e65d
- SHA1 69c1e22cabb599f29e7485a9c6f32c40f9559e38
- SHA512 b3d659b4f318ec9b6c11ff90651efde11fdcefb42c17a1381845d50a651e9ec3070753fbf28c10fd7d4203d96b41d0a4697cde285726fab92790ffca19e6dfe6
- SSDEEP 98304:k9INMCH/CTy/rZERVMgVTTqZh18zYXPasMod+B/sX7AK1Ts+685sN3NhTgj6ceFS:kO3HSfJw8ErBXANhJgBw72
- TLSH
  T144B65B4BF2B714FCC1AAD430525FE663F934385841257A3B66D8DA301FA3E206B9DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Exodus/runtimes/linux-x64/native/libHarfBuzzSharp.so
- Size 2.0MB
- SHA256 95fad4b704332ff1a9d7e137ab5d1849b8711099be61fd5d264afe0562b306a2
- MD5 ded676d3023bb7f08d7de7e7edaee68e
- SHA1 e4ef87b4faaafb0176b856a0524ecfd564feb340
- SHA512 0199620e34330107a4660063eba07f72a76127b51ee43a1131819d9a8e54d0f6a1e92f4f840291ef8a62fc6113d89e571b76e9f62f744ae65cbb5412b70fdf69
- SSDEEP 24576:XouxmpcDanVDn8kUA2VLElER5w2iraWAf1p3F86gn+FF7nxBhI2X:7xmpcDIDnnJumA1p16iBnxBy4
- TLSH
  T1F1A56D82F1B724BDCE1ACC34921E9433E57A74061112AD7BB6C4EB306F15E619F9EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Exodus/runtimes/linux-x64/native/libSkiaSharp.so
- Size 8.8MB
- SHA256 a009dee86e037173654eb19b91365e7d545814b7f632240049596c04342fcf02
- MD5 2182bb47766d57adb5706c9c1f140339
- SHA1 0697b403c89c00bc27977dbcc2080aacb13ea7b1
- SHA512 72a1ef05e691f6e82e42917629c671ba71215bce0c0c188b7f87e6cad0cf2956108c95a659c2d7f138d29601c4e3d611d64108dce1c2a7421314e53091046b1c
- SSDEEP 98304:y9u0A7d0d5gh8pQKQzvVqA0PjVctyj5kdJF98IYdJr:y95iYgMCDor
- TLSH
  T1AD965B42F5B324BDC96ACC34875EA437F634344582256E3736C8EA312F66A209F5FB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Exodus/runtimes/osx/native/libAvaloniaNative.dylib
- Size 1.3MB
- SHA256 cc39dfea7b7360479f82ded049d87173b5a64e72193e4fd5847def419417b0bd
- MD5 4d6d1f55ef25c4a1b0aff1fd6133da82
- SHA1 505790fb8ef61b85aa10c56e3e28199a424591cc
- SHA512 6dccc26a4274dd145b9b5c250226e6740a8bf77fc8eb2811567a992533371527fe8ab6c9382c9d09693a50e246464d196f514bd9b034153476ff879e30960184
- SSDEEP 12288:5CfMRSgED+IL/V15pqUKypD16q7J1TWtOlnwbN1uO:sERS5DN/V15pqUKNqlRJnwR1uO
- TLSH
  T114552B22E7486853CE9962B84F6E0329F336FD419B34D3EB2990B1796FF21954F11B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Exodus/runtimes/osx/native/libHarfBuzzSharp.dylib
- Size 2.6MB
- SHA256 ca20dd85d0204a7bdaa2b6eb4f6bd17486d8c6e860437052de29a08538de085e
- MD5 4c390260c3d123d2e6a06962d5205309
- SHA1 65ab0d43b255f54c3ebe0733697b8a65c45f0979
- SHA512 4584f554cd4ee2e23a596245a56b12b599ba82a00f01c519b1418651a43a30d03bcef5ce7a156bf23da4366361c7050af0edc571df5ad51cf18718b93d643d5b
- SSDEEP 49152:ENZfLMHDxO/N0a0/1fsRcUnV5qMGgiUqBIIdhY4/HXHLgxx4cl1D7sibXP+IgMyG:iCxO/Cas05qMtirBIIzY4/HXHLgxx4cT
- TLSH
  T172C5BF07A56D4412E5C1F13D4B868B723216F4A26724F5AD3362B26CEF54DF2A62E333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Exodus/runtimes/osx/native/libSkiaSharp.dylib
- Size 14.4MB
- SHA256 2eeb547217bd3f44d30867cf2a6f65455d429c94951cb8faca41c894092aa198
- MD5 7c25f4b710cbaae431d61053663f3211
- SHA1 858a74c4fb9286ccfc648cd58261b32bc5abc5c1
- SHA512 4b2f634b1b984f3d188257cf8f6c4ef0ac9015d010b93d87dbdbe33c3258274836317a960537959296e3d4ef4b75f2df7304955e0f38a26810567c9d49b2095b
- SSDEEP 98304:faHWCseZBgVuEZy5WWAZNv2fzTeHfSA6bG/IRxLju7zjAyAp20NyAUoLAkwwhBYk:SfCFoTIfHIG7zjAyN0NyACkONhuRCK
- TLSH
  T153E6CF05A13DA42CE0C6E07C4B5B4AB27525FCA44234E99B35A6F378EEA1DE0563D733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Exodus/runtimes/win-arm64/native/av_libglesv2.dll
- Size 4.0MB
- SHA256 da25c83dc53e69838e8ca21a1526beabe086cb3fcb348fd441e21ed8f917898b
- MD5 470a5ccdce0da2b142f8332e4d431507
- SHA1 296e0b8e93c5374080304e353797f321e1abb6e5
- SHA512 54a8d58ce331a970e84689db582ed20abb702216659fe21eda917d81b1b8852d1879f4d61ec6433257ef6cc47c35ccec0785f0b6fb097aa206586a2d2f86d5e4
- SSDEEP 49152:b6r5zk6oode++IUMZc/rH51CrOtTG2tSLfjN3:b6ri6ooduIU
- TLSH
  T1A5164B04AB4CAC92E5C2F63CDD674F98212BED709021869FB55F414CEEA5BC2E2E7171
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  Exodus/runtimes/win-arm64/native/libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 12ade447cbc51cf31735a609c78906614eb68141a97a3b1745c32db537ace15f
- MD5 7f2fab055aa2b32d8993c43e9adf3482
- SHA1 0eb3df4a6c1a8b0d2118ac177cdfbf9854f4d1ce
- SHA512 e5751762c02cc6bb37b198ce59c25e97e4dd515b37fea8ba79bb38c85895b5d869e87be507813d3d3f41d38d870adcbc464e9696fd4da4df07c4ee7728366929
- SSDEEP 24576:hKn2zaVVdDstuR6xriVjl87Kc80WfKdUt4t5Q33M00ke0Xm4S361g:FKVdguRTl8380WfKdUt4t57em4E61g
- TLSH
  T114858E40DA0DE882DBC2EB3DEC958F603137A9B0C5645CDEA146451CFCD1FD6C5E8AA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  Exodus/runtimes/win-arm64/native/libSkiaSharp.dll
- Size 7.6MB
- SHA256 58d6071685942c646f4bb110508ebe72c80fc360ed8d8e9afcf1035d99f36bdc
- MD5 4415da0cdca32b651f1422df19ae26eb
- SHA1 c84ae767fcce5ed09f935be0108d367978c5f272
- SHA512 3bf9b3bfad8ffebc0c1046cda8247d1475205c5aff9dc1a9ac9edaaedfc65340b548eeeba36e15d9c6e5aeda701c35e2116ecbdc6b6fe0e9ac9f1accea97619a
- SSDEEP 49152:GVkH9NFrcZtJoNRovXDNzpOxvADks8ihRkgAR7x+JeHXWVY/aOqdNZH5zuTdQh8y:GVkH9HrcZt2zovGxs3W9N3KdPH5z2dxy
- TLSH
  T1CC867D80196DE869E6C2E8FC6E674BD5361AA880CD35868F7036421DDC72BD1DDF72B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  Exodus/runtimes/win-x64/native/av_libglesv2.dll
- Size 4.2MB
- SHA256 85b3aee47c0e0eaf3a5ea5c75ba8131387a12639b6a0ef280c28531fb77695ae
- MD5 73d2fb4c35d323813a86e3bf5c85c345
- SHA1 81f751a34e0c25bdea93902a19a94a49ce1495df
- SHA512 e81677cc9b99ff3d54f67000a60489603e01a896f90c4ef0c883b82e2fdb7b90d2899c078958b3f060a20373b99cb6c4deb7f64cc4c7e0ba2a708209f4684ca4
- SSDEEP 49152:I1qISHMa72SRXc0kFg760EvAy4U5hDempTKkslMx0YEQtHhcEIy/rcgcrq8T/2tj:vbMNgMdth1t
- TLSH
  T175167D1AA7B400BAC8BBD139C9175A0BE3F1FC4641B0D70F21B9679A5FA7770626B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Exodus/runtimes/win-x64/native/libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 f13d0dae00a598620a436fd991219a2e0fe6157eac90faa025d4d76845cd996c
- MD5 f121a2afb03f1b8ca1784e544464a346
- SHA1 9346297a66989dbe88bc459ee8bf936e7acb3d24
- SHA512 ebbb8c2d7d97521286af0f6b02195890b193e660a28e6b1e5112ed9f1fcc081c66587a7a82c8a9468d1a55d477880487d1b3edf1deb2ea285e17d70fbd56c6f1
- SSDEEP 49152:PBy4VCDmxqVx/1hlcsHI7woyGYdwENWa6m4ys:aQkPNWMs
- TLSH
  T1A575AD4AE26A11E9D9ABD074C656840BD3B274420F14DFFF26E08695EF23EF5167E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  Exodus/runtimes/win-x64/native/libSkiaSharp.dll
- Size 9.0MB
- SHA256 3268b1b2de384d00ed77431fe8a1f053d2c69eee25d07dcfc352491570d63b52
- MD5 6b5e769126b4d38601df662bd08e7163
- SHA1 c799c7c3b8209468bb4047b4783f691537d717e9
- SHA512 168c4a5981aa6513bacaa459bac26a3033315a677547eaa01d901b75e46baef91c6fd63185629a3a218a643fcacfa86ae36b8a5313e11f3bcd311bf4b0c61c6f
- SSDEEP 98304:cjRZLtqNj1xK+Re5fNMVlgpANGuRsUCn+ovoZOXe:oZL8NabV0fGkNee
- TLSH
  T10C964A13B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF42F79615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  Exodus/runtimes/win-x86/native/av_libglesv2.dll
- Size 3.2MB
- SHA256 b5f682067664bf44f92418d57097876b9ffb656c4e1e496d7f056eb3f910e5d8
- MD5 c2b853790468c88c21ec7b6e21959313
- SHA1 54bca8b373eba2196cf47b497734ebe3aaa0d37a
- SHA512 cb885aaaba3a6bb4770d86d0ff6cc6bf499fae945fbf45680bf3682a20bcb4af4b9ecd4e31172cfa090b630d8e749a120d31fd0436e2ffd50efe55146f6744ab
- SSDEEP 49152:9nm84lPJ9YOUCXg4/OuBuitPB5W4pifrmvzrjBTSBYWxXzfjhCAZmfYM:9nhEJSOfQ4/LB9b5WxB
- TLSH
  T18CE59E1278E14436DA5E0270498ABF49E7FCA9112171DB9726BC981EBFF1AC36333356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30 behavioral31
- Target
  Exodus/runtimes/win-x86/native/libHarfBuzzSharp.dll
- Size 1.3MB
- SHA256 797b2472ac9cb2457a1cf3db0970fb88f4531c8217fff4b7705decf9a85a19a5
- MD5 1426c6d3cecd7e504db7121caf7be3c5
- SHA1 dfa43f1682b5f988d0f26c38dab3ef38d2cb94bc
- SHA512 b90aa23f9c6ef9d942469f2fd36bab1f700dfd3d867132f0a7c43d42a3cd84957e3564e27db1f93745518b53f9046144a61eecf912c5b272f56ad9374ba2bba9
- SSDEEP 24576:3psAU7vw8DMj0Cl5szcGX5sE0qtSTxleVbXXzskEXbRhrOa:xeI8DEHAcGXCxsBXX/ubvrOa
- TLSH
  T130558D10E413C4A5ED8500F1EABDFA9E25ACDB35032C5CE3A9C0A969FE615F32E35647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32