General

  • Target
    Exodus.rar
  • Size 144.7MB
  • Sample260730-28e2zastbs
  • SHA256 0a43ca8e10ca18d00c5e5cf6cabb5ffe9cda3926a8bd40f3d6b5f12dcd8bd7df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Exodus.rar
    .rar 144.7MB
  • exodus/Exodus Setup.exe
    .exe 13.2MB
  • dualE.pyc
    4KB
  • exodus/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/cs/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 336KB
  • exodus/cs/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/cs/Microsoft.CodeAnalysis.resources.dll
    .dll 37KB
  • exodus/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/de/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 357KB
  • exodus/de/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/de/Microsoft.CodeAnalysis.resources.dll
    .dll 39KB
  • exodus/es/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/es/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 350KB
  • exodus/es/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/es/Microsoft.CodeAnalysis.resources.dll
    .dll 38KB
  • exodus/fr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/fr/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 358KB
  • exodus/fr/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/fr/Microsoft.CodeAnalysis.resources.dll
    .dll 39KB
  • exodus/it/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/it/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 356KB
  • exodus/it/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/it/Microsoft.CodeAnalysis.resources.dll
    .dll 39KB
  • exodus/ja/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/ja/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 391KB
  • exodus/ja/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/ja/Microsoft.CodeAnalysis.resources.dll
    .dll 41KB
  • exodus/ko/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/ko/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 361KB
  • exodus/ko/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/ko/Microsoft.CodeAnalysis.resources.dll
    .dll 39KB
  • exodus/pl/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/pl/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 361KB
  • exodus/pl/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/pl/Microsoft.CodeAnalysis.resources.dll
    .dll 39KB
  • exodus/pt-BR/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/pt-BR/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 344KB
  • exodus/pt-BR/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/pt-BR/Microsoft.CodeAnalysis.resources.dll
    .dll 38KB
  • exodus/pu/ExodusStorage.7z
    .7z 26.0MB
  • exodus/pu/cache.7z
    .7z 70.4MB
  • exodus/ru/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 16KB
  • exodus/ru/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 473KB
  • exodus/ru/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 17KB
  • exodus/ru/Microsoft.CodeAnalysis.resources.dll
    .dll 46KB
  • exodus/runtimes/linux-arm/native/libHarfBuzzSharp.so
    .elf 1.3MB
  • exodus/runtimes/linux-arm/native/libSkiaSharp.so
    .elf 5.3MB
  • exodus/runtimes/linux-arm64/native/libHarfBuzzSharp.so
    .elf 1.8MB
  • exodus/runtimes/linux-arm64/native/libSkiaSharp.so
    .elf 7.7MB
  • exodus/runtimes/linux-musl-x64/native/libHarfBuzzSharp.so
    .elf 1.8MB
  • exodus/runtimes/linux-musl-x64/native/libSkiaSharp.so
    .elf 10.7MB
  • exodus/runtimes/linux-x64/native/libHarfBuzzSharp.so
    .elf 2.0MB
  • exodus/runtimes/linux-x64/native/libSkiaSharp.so
    .elf 8.8MB
  • exodus/runtimes/osx/native/libAvaloniaNative.dylib
    .dylib 1.3MB
  • exodus/runtimes/osx/native/libHarfBuzzSharp.dylib
    .dylib 2.6MB
  • exodus/runtimes/osx/native/libSkiaSharp.dylib
    .dylib 14.4MB
  • exodus/runtimes/win-arm64/native/av_libglesv2.dll
    4.0MB
  • exodus/runtimes/win-arm64/native/libHarfBuzzSharp.dll
    1.7MB
  • exodus/runtimes/win-arm64/native/libSkiaSharp.dll
    7.6MB
  • exodus/runtimes/win-x64/native/av_libglesv2.dll
    .dll 4.2MB
  • exodus/runtimes/win-x64/native/libHarfBuzzSharp.dll
    .dll 1.5MB
  • exodus/runtimes/win-x64/native/libSkiaSharp.dll
    .dll 9.0MB
  • exodus/runtimes/win-x86/native/av_libglesv2.dll
    .dll 3.2MB
  • exodus/runtimes/win-x86/native/libHarfBuzzSharp.dll
    .dll 1.3MB
  • exodus/runtimes/win-x86/native/libSkiaSharp.dll
    .dll 7.6MB
  • exodus/tr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/tr/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 341KB
  • exodus/tr/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/tr/Microsoft.CodeAnalysis.resources.dll
    .dll 38KB
  • exodus/zh-Hans/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/zh-Hans/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 304KB
  • exodus/zh-Hans/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/zh-Hans/Microsoft.CodeAnalysis.resources.dll
    .dll 35KB
  • exodus/zh-Hant/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll 15KB
  • exodus/zh-Hant/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll 304KB
  • exodus/zh-Hant/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll 16KB
  • exodus/zh-Hant/Microsoft.CodeAnalysis.resources.dll
    .dll 35KB

Exodus.rar

  • SHA256 0a43ca8e10ca18d00c5e5cf6cabb5ffe9cda3926a8bd40f3d6b5f12dcd8bd7df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected