980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278

Login
Reports

Overview

overview

Static

static

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...t__.py

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...out.py

windows10-2004-x64

Exodus-Bal...all.py

windows10-2004-x64

Exodus-Bal...ngs.py

windows10-2004-x64

Exodus-Bal...ons.py

windows10-2004-x64

Exodus-Bal...fig.py

windows10-2004-x64

Exodus-Bal...ers.py

windows10-2004-x64

Exodus-Bal...t__.py

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...11.pyc

windows10-2004-x64

Exodus-Bal...rch.py

windows10-2004-x64

_asyncio.dll

windows10-2004-x64

_bz2.dll

windows10-2004-x64

_ctypes.dll

windows10-2004-x64

_decimal.dll

windows10-2004-x64

Exodus-Bal...tor.py

windows10-2004-x64

Exodus-Bal...her.py

windows10-2004-x64

Exodus-Bal.../ui.py

windows10-2004-x64

Exodus-Bal...ult.py

windows10-2004-x64

Exodus-Bal...ain.py

windows10-2004-x64

Exodus-Bal...un.bat

windows10-2004-x64

Exodus-Bal...run.sh

windows10-2004-x64

Analysis

max time kernel
898s
max time network
475s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 19:09

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Exodus-Balance-Flasher-main/__pycache__/bot_actions.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral2

Sample

Exodus-Balance-Flasher-main/__pycache__/config.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral3

Sample

Exodus-Balance-Flasher-main/actions/__init__.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral4

Sample

Exodus-Balance-Flasher-main/actions/__pycache__/__init__.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral5

Sample

Exodus-Balance-Flasher-main/actions/__pycache__/about.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral6

Sample

Exodus-Balance-Flasher-main/actions/__pycache__/install.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral7

Sample

Exodus-Balance-Flasher-main/actions/__pycache__/settings.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral8

Sample

Exodus-Balance-Flasher-main/actions/about.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral9

Sample

Exodus-Balance-Flasher-main/actions/install.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral10

Sample

Exodus-Balance-Flasher-main/actions/settings.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral11

Sample

Exodus-Balance-Flasher-main/bot_actions.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral12

Sample

Exodus-Balance-Flasher-main/config.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral13

Sample

Exodus-Balance-Flasher-main/helpers.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral14

Sample

Exodus-Balance-Flasher-main/helpers/__init__.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral15

Sample

Exodus-Balance-Flasher-main/helpers/__pycache__/__init__.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral16

Sample

Exodus-Balance-Flasher-main/helpers/__pycache__/arch.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral17

Sample

Exodus-Balance-Flasher-main/helpers/__pycache__/executor.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral18

Sample

Exodus-Balance-Flasher-main/helpers/__pycache__/fetcher.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral19

Sample

Exodus-Balance-Flasher-main/helpers/__pycache__/ui.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral20

Sample

Exodus-Balance-Flasher-main/helpers/__pycache__/vault.cpython-311.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral21

Sample

Exodus-Balance-Flasher-main/helpers/arch.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral22

Sample

_asyncio.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

_bz2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

_ctypes.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

_decimal.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

Exodus-Balance-Flasher-main/helpers/executor.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral27

Sample

Exodus-Balance-Flasher-main/helpers/fetcher.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral28

Sample

Exodus-Balance-Flasher-main/helpers/ui.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral29

Sample

Exodus-Balance-Flasher-main/helpers/vault.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral30

Sample

Exodus-Balance-Flasher-main/main.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral31

Sample

Exodus-Balance-Flasher-main/run.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

900 seconds

defense_evasion discovery execution spyware trojan

Behavioral task

behavioral32

Sample

Exodus-Balance-Flasher-main/run.sh

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

900 seconds

execution

Report Analysis Logs

General

Target
_decimal.dll
Size 249KB
Sample261102-xtsbjawwhy
SHA256 980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278
MD5 c88282908ba54510eda3887c488198eb
SHA1 94ed1b44f99642b689f5f3824d2e490252936899
SHA512 312b081a90a275465787a539e48412d07f1a4c32bab0f3aa024e6e3fe534ac9c07595238d51dc4d6f13c8d03c2441f788dff9fe3d7ca2aad3940609501d273bd
SSDEEP 6144:E7W/Dmi0FD5KaN7VqqO9a3juVQt07Ou9qWM53pLW1AT3Otjm1+Br:L/Ki0FdVI9a3juKeqcO+Br
TLSH
T11C446C57A2490CA4DE738474D89B9B47FBB278854320C3CF03A48AA76F577A323B9744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_decimal.dll,#1
1⤵
PID:4568

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads