General

  • Target
    Exodus Setup.exe
  • Size 13.2MB
  • Sample260930-dhh4yasbne
  • SHA256 b5e2e17ae2f106ce99f69410738be0688b0f160f7b95e56297e61621a3b683c7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Exodus Setup.exe
    • Size 13.2MB
    • SHA256 b5e2e17ae2f106ce99f69410738be0688b0f160f7b95e56297e61621a3b683c7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      dualE.pyc
    • Size 4KB
    • SHA256 8720c6924f7b7c7df063e490260eacbcf908651f26a1592943c83be1391eaea6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks