Analysis
-
max time kernel
144s -
max time network
219s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
17-04-2023 14:47
General
-
Target
theZoo-master/malware/Binaries/All.ElectroRAT/All.ElectroRAT.md5
-
Size
60B
-
MD5
2f178a474ab4490e44b151fa65bec685
-
SHA1
5415b4aff780204f548c999f74fb83a33c56247b
-
SHA256
0075738d9ae4e957fa60c8701a7080102da30ec7091bb8964593ae995c7ff522
-
SHA512
20b5c705c3b8ad81210eef86c069b55e49a1de6f401dd853c45216050684f986dddb3c710c1a5622efab5a42aa6707d5b7ed4deec2e31b7b6e9f26c569bb4889
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\theZoo-master\malware\Binaries\All.ElectroRAT\All.ElectroRAT.md51⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx