Exodus-Flasher.zip
- SHA256 8ae4c8daae166d372a1f5c96580f1bc9e13f8a4cb48de7c2d1154ae2152d5a2f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Exodus-Flasher.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Exodus-Flasher.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Exodus-Flasher/Exodus-Flasher.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Exodus-Flasher/Exodus-Flasher.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Exodus-Flasher/config.json
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral6
Sample
Exodus-Flasher/config.json
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target Exodus-Flasher.zip
- Size 2.0MB
- Sample261101-2b6tesdw4y
- SHA256 8ae4c8daae166d372a1f5c96580f1bc9e13f8a4cb48de7c2d1154ae2152d5a2f
- MD5 c5b5053dc36f75ba3f7879b611bd2f9f
- SHA1 55e548a0c75166f45ae1727a97413a37772de979
- SHA512 05e1fb4dde39fcb2d77df5c77c73ea597bb0ea9aa7ff657ef071369d8467149fb084ee0845f1fb61dad83edbcfc9fc1d46e4a6f83c9f1b3a1cf3b72b70bda646
- SSDEEP 49152:7fnMBGxiStiUKEiHgw3REglsYDzGTGhE/ZSTCYWKAFb1T6X4fSrbE2Cya5:70BqiStindR3fnqZSTCeaSMaa5
- TLSH T1E8A533CBC46B822C15CAD915B04B7968A2B9FFC887476FB463CFF8685A031AF57C4048
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Exodus-Flasher/Exodus-Flasher.exe
File Explorer
-
Exodus-Flasher.zip.zip 2.0MB
-
Exodus-Flasher/Exodus-Flasher.exe.exe 8.9MB
-
Exodus-Flasher/config.json322B
Exodus-Flasher/Exodus-Flasher.exe
- IMPHASH f156d31bfefcf5d2bb293b20a02362a8
- SHA256 0bf23bd88678e613971c9c5d56f61acbe5d5cdab70846d104bc42058d924327c
- MD5 b2e85762e468dd27ffa27b4a4f94110d
- SHA1 2b4c617c2b62822e78115f2972740396e047a127
- SHA512 4125212f68da178839ebe3b391af6d5012f6efdf5d43aef7b519d3efe536ce0dfd0787e97a1a0081445dbd88116cc5803d5e9ff6ba0de820a258ec771c821548
- SSDEEP 49152:/bSqrLJ8N9x2Lg1X4CcgfYnzLw41dCUOsBNz3tZ8mHYwvIIypfA/hbOmrvh0r:6fWz3AUzzz38r4/dCr
- TLSH T17C9604762BF62633D8AF7A5B857040319971229FC83E5F53394DA4609F2AE6C04F326D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
CreateFileW
GetFileAttributesW
GetLastError
GetLocalTime
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
VirtualProtect
user32
DefWindowProcW
GetDC
GetForegroundWindow
LoadCursorW
SetWindowTextW
gdi32
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
SetBkMode
ole32
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoUninitialize
Name
.c7f562
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.41d558
Size
4.8MB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.af25e2
Size
512B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.f5ec84
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=4, id=261, version=30816,
count=25, id=260, version=30809,
count=23, id=256, version=30822,
count=33, id=259, version=30815,
Exodus-Flasher/config.json
- SHA256 488c243d75e03961acbd304fa5ad0ed33f0d559c3977312c6e3d1b6ce5a006cf
- MD5 dfdd69ee6629adf03e85a995ec0dee2d
- SHA1 da0a4379c5ace0b40bec46ccee175a09243d17e4
- SHA512 11395b003b062a6949a4e0d45650930d23478e221ce5986719285a9b04ca8c57649d46b1385432a99dbdbb2a4145ef4dd692904d6832c860b6fbbcd4276c465f
- TLSH T1D8E0C238D5690EBA8BB9355075497703E850671B01221C2B74BD510C5FB210A94C4D60
- MD5 SHA1 SHA512 TLSH