Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 23:29
Static task
static1
Behavioral task
behavioral1
Sample
PermEdit.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PermEdit.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
WPE by elektro255.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
WPE by elektro255.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
elektr.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
elektr.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
wpe.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
wpe.exe
Resource
win10v2004-20240508-en
General
-
Target
WPE by elektro255.exe
-
Size
308KB
-
MD5
94133f8293be29c1e68eac581e642f15
-
SHA1
cbdad254269f42f1edc06e5e2e8dbb890e890702
-
SHA256
5ae661e5ad7b131276d39cead78a2c6cf4490a68a0470a6128a3e9b46d94d0a2
-
SHA512
4e5b8281c676a84666f376486b36706f9a4e3a898a98d53d48f8ca79d38e2f33eba1d9c5e9cc7b1993b035274ec9377e0d90f0dc7b217cacedd73cdb487e42ce
-
SSDEEP
6144:3GZjdR/94YzvpRXqxEMpmKwx8vDVdMrdNLDWDyxCAr2OWZ:4j/uYzfX+VirCDyx2Om
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
WPE by elektro255.exepid process 2908 WPE by elektro255.exe 2908 WPE by elektro255.exe 2908 WPE by elektro255.exe 2908 WPE by elektro255.exe