Overview

overview

7

Static

static

electrum-m...ic.exe

windows7_x64

7

electrum-m...ic.exe

windows10_x64

6

Resubmissions

15-11-2021 17:58

211115-wkfeyabbb6 10

15-11-2021 15:29

211115-sxcyssafh2 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    electrum-monero-classic.exe

  • Size

    19.9MB

  • Sample

    211115-sxcyssafh2

  • MD5

    e7974b4c9ed4f20a4bb74982e22fe2c0

  • SHA1

    0c6b6e77219169aab800fbb941d37393ac0dcfec

  • SHA256

    3c3be6e127da2999baa57c99bc3f65db319cf96c8a10d6ffead51c057c5a7490

  • SHA512

    672fce3dc9f2d9108e821cf862f1fee3cae10ed5aa76caac4a60c6c0e8a953d981ea3d19c5b4255debb9037435897544ad07594c6ef4b51c2434d184f0b7d1bc

Score
7/10
pyinstallerspyware

Malware Config

Targets

    • Target

      electrum-monero-classic.exe

    • Size

      19.9MB

    • MD5

      e7974b4c9ed4f20a4bb74982e22fe2c0

    • SHA1

      0c6b6e77219169aab800fbb941d37393ac0dcfec

    • SHA256

      3c3be6e127da2999baa57c99bc3f65db319cf96c8a10d6ffead51c057c5a7490

    • SHA512

      672fce3dc9f2d9108e821cf862f1fee3cae10ed5aa76caac4a60c6c0e8a953d981ea3d19c5b4255debb9037435897544ad07594c6ef4b51c2434d184f0b7d1bc

    Score
    7/10
    pyinstallerspyware

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks