General

  • Target

    Electron_Cracked_V3.zip

  • Size

    36.6MB

  • Sample

    231231-bddybabcfm

  • MD5

    5c7a69b31f44cb7cc60e6973b38c6ed7

  • SHA1

    e53857dc979371154c357c62a971846729ba3c61

  • SHA256

    837de720e6dcfad7492b45e465415dc5f01379ded27c2ee9c129fe510a769967

  • SHA512

    134e5ee7c351ac37812ae2beabd1116e90b6ac00eaf12f41b785388a704109cc6aa6cd14e7d4d371198caa3015150adde4dff6f69b9ce3ed957c2fe29a841550

  • SSDEEP

    786432:vNN1Lv7I4e/nIpyWY116ENN1Lv7I4e/nIpyWY116p:r1LzI4e/nIAWO16w1LzI4e/nIAWO16p

Malware Config

Targets

    • Target

      Electron_Cracked_V3/ElectronUI.exe

    • Size

      18.5MB

    • MD5

      b71d61c5fd20adb71fdf3c6897e07621

    • SHA1

      c2aff150e730d6bbdad359b40c378dd5acf5d21a

    • SHA256

      f2cf03d675c1c16d487935bca3fc7d851f8b3023fcfece52c705c494e613a4d1

    • SHA512

      895663774a60d28ab93041b8703b91e837fbe8edfbd8ca1148c45cf2ac23af74eb1ce60b8deb8f5e31936673eb12761e49c3c0ceb240e9b5d90a0d37209dafa5

    • SSDEEP

      393216:HqPnLFXlregQpDOETgs77fGa5gwllvEzOg8tm:KPLFXNLQoE7pBUFP

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      Electron_Cracked_V3/Particle.exe

    • Size

      18.5MB

    • MD5

      b71d61c5fd20adb71fdf3c6897e07621

    • SHA1

      c2aff150e730d6bbdad359b40c378dd5acf5d21a

    • SHA256

      f2cf03d675c1c16d487935bca3fc7d851f8b3023fcfece52c705c494e613a4d1

    • SHA512

      895663774a60d28ab93041b8703b91e837fbe8edfbd8ca1148c45cf2ac23af74eb1ce60b8deb8f5e31936673eb12761e49c3c0ceb240e9b5d90a0d37209dafa5

    • SSDEEP

      393216:HqPnLFXlregQpDOETgs77fGa5gwllvEzOg8tm:KPLFXNLQoE7pBUFP

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks