eb9caaa80b4f0769a2dc02ae6728647752c5e91a2d8a4d5c79b9c43cf70869f3

Analysis

user interaction
yes
max time kernel
100s
max time network
109s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
31/07/2026, 12:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Exodus/Exodus/Exodus.exe
Size 507KB
Sample260731-ptmr2stcmd
SHA256 eb9caaa80b4f0769a2dc02ae6728647752c5e91a2d8a4d5c79b9c43cf70869f3
MD5 9c6231dd34f9bd9f9738275709e89892
SHA1 07b6e5cd7edc1ed1ae1bc64731fc786ed863c251
SHA512 e964a5e9ccfc6fa476379ac12447912ce39fb74212262cac4a7c4a503b1f806c676b5f60b50e99deb32edf96002bd2957164b956486c25d758f5757414899b1e
SSDEEP 6144:UVVTR1euN6pSevzWKZzaMeIdtuE5dqkBfyboi:UV3N6pSevVfqkBfy
TLSH
T112B4E8173FB8D998C11CBD3A69F28727B7329A250F5605026F122E739A72DA8FF51344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000\Control Panel\International\Geo\Nation	Exodus.exe

C:\Users\Admin\AppData\Local\Temp\Exodus\Exodus\Exodus.exe
"C:\Users\Admin\AppData\Local\Temp\Exodus\Exodus\Exodus.exe"
1⤵
- Checks computer location settings
PID:4784

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x500 0x4ec
1⤵
PID:5092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads