General
-
Target
ElectronV3.exe
-
Size
20.7MB
-
Sample
240526-rja2lshh29
-
MD5
eeb5d819c120cc34627f0983a6d48b34
-
SHA1
828d6d55b38bf8cebb702fff7d5a92b9b5f26414
-
SHA256
3baff462e685cb8832975aff49f298497f33f5897caf91d1af057c1e89afd09a
-
SHA512
a1317ef3933131e247bd4f3be725ebd0cc25d2d134002a5aa9e543b274eea2befc758f5da6e0e7081fe91cac74f5b5b77ac1966d8108e12ec7cdbf3a055cd366
-
SSDEEP
393216:FD9et5y+9/pWFGRUnfXBsnYDrIW1TaDH:FD6y+9/pWRGH6q
Behavioral task
behavioral1
Sample
ElectronV3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ElectronV3.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
ElectronV3.exe
-
Size
20.7MB
-
MD5
eeb5d819c120cc34627f0983a6d48b34
-
SHA1
828d6d55b38bf8cebb702fff7d5a92b9b5f26414
-
SHA256
3baff462e685cb8832975aff49f298497f33f5897caf91d1af057c1e89afd09a
-
SHA512
a1317ef3933131e247bd4f3be725ebd0cc25d2d134002a5aa9e543b274eea2befc758f5da6e0e7081fe91cac74f5b5b77ac1966d8108e12ec7cdbf3a055cd366
-
SSDEEP
393216:FD9et5y+9/pWFGRUnfXBsnYDrIW1TaDH:FD6y+9/pWRGH6q
Score10/10-
Exela Stealer
Exela Stealer is an open source stealer originally written in .NET and later transitioned to Python that was first observed in August 2023.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-