Analysis
- user interaction
yes - max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 16:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Exodus.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Exodus.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Exodus.zip
- Size 54.5MB
- Sample260807-t3lcsssvcs
- SHA256 b5379ed50a94f28ecd7a5822dfa5942937e2de82934c81ad06470b6a7852220f
- MD5 3a24d52082b106f7e853012dd6b5669d
- SHA1 01615568c05cd6ee253f54461d05664045406bfa
- SHA512 93a052f32cad9614e41805e20d4b527e9ff6a3f2c7e90bb5707609494f99a0899fd02e623a82c46e9ec7af2a80a4287702b841e413bf04d243fd6b96f57decfe
- SSDEEP 1572864:IbwlbtT0DgewDi68BdnlJfW+ymKAmA7p2vgh:ZxTPDDiTJfW+zKAmksK
- TLSH T15FC73351AA9EDCDDC26B2DD26FEAB89C733061F1A35C29076B65BCD42C232D0734A4D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Exodus.zip1⤵PID:2296
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4940