Analysis
-
max time kernel
6s -
max time network
83s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
17/04/2023, 14:47
General
-
Target
theZoo-master/malware/Binaries/All.ElectroRAT/All.ElectroRAT.pass
-
Size
9B
-
MD5
d1ffcf28ab933ac685753cc6c1be9b20
-
SHA1
5d0447073056a1e9de9b38ab47d0a52b53418fb7
-
SHA256
d682d88cbb07ad1adfc69618adc71e3549733be116fbbbf4395e6235da0dbf7f
-
SHA512
921919e71a1bc899f9dabf3eac13d4f6a793067976925023e21601d897838e5d8ce71e69cdad920046d8fa3b408b6acb19dca748ffd60b3892f60f322b28df0a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\theZoo-master\malware\Binaries\All.ElectroRAT\All.ElectroRAT.pass1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx