General
- Target Exodus Setup.exe
- Size 13.2MB
- Sample260930-dhh4yasbne
- SHA256 b5e2e17ae2f106ce99f69410738be0688b0f160f7b95e56297e61621a3b683c7
- MD5 ba94a56890c37bb9fc4e7185cf2768f7
- SHA1 04cd56c89995e023b2bd6659a03be9f44a14fe6f
- SHA512 5885aa22c7223dcac711a111dee50a439adbe9e2b1dd62d0c1ed057cfd9b83496968e440e602fa833c13ee260ad91505c07d872985f3ae78bba6da1528eeb409
- SSDEEP 393216:4CrNYJRx/hEVbdXQfM6R4RmhiHsnvDwHcBnl:jrSJRxYYMc3ggEHu
- TLSH T111D633276FB58D98C158BD3A69F18727F3718E250F9645132E111E336A73DE8EF22284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
Exodus Setup.exe
Resource
win10v2004-20260911-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
Exodus Setup.exe
Resource
win11ltsc2024-20260911-en
8 signatures
900 seconds
Behavioral task
behavioral3
Sample
dualE.pyc
Resource
win10v2004-20260911-en
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
dualE.pyc
Resource
win11ltsc2024-20260911-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target Exodus Setup.exe
- Size 13.2MB
- SHA256 b5e2e17ae2f106ce99f69410738be0688b0f160f7b95e56297e61621a3b683c7
- MD5 ba94a56890c37bb9fc4e7185cf2768f7
- SHA1 04cd56c89995e023b2bd6659a03be9f44a14fe6f
- SHA512 5885aa22c7223dcac711a111dee50a439adbe9e2b1dd62d0c1ed057cfd9b83496968e440e602fa833c13ee260ad91505c07d872985f3ae78bba6da1528eeb409
- SSDEEP 393216:4CrNYJRx/hEVbdXQfM6R4RmhiHsnvDwHcBnl:jrSJRxYYMc3ggEHu
- TLSH T111D633276FB58D98C158BD3A69F18727F3718E250F9645132E111E336A73DE8EF22284
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target dualE.pyc
- Size 4KB
- SHA256 8720c6924f7b7c7df063e490260eacbcf908651f26a1592943c83be1391eaea6
- MD5 f28080095ccf0b219c2b27aaa06dce55
- SHA1 0e86ab4c960b0aa5fb7f36ed92e7a24b9421d754
- SHA512 51c9723442607f4fc2d317af23659dde3436fcbf1f2d8d81491202e0fb0687b9ad2433d865c1bfee80d2f8d4c1544cbf7014ead4ad41b75e775e5afcab43f602
- SSDEEP 96:hK3HwzfY7DUBCry8zaAWfhFndyouA+ACwCFBDPk:hKsYVaLbdyouAuk
- TLSH T1E9A1B675859437ABDEBEC075B1DF8D4533709291B284BBCBB224487C7DD93294A2220E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10