Overview
overview
7Static
static
3Electric.rar
windows7-x64
3Electric.rar
windows10-2004-x64
7ByfronHook.dll.txt
windows7-x64
1ByfronHook.dll.txt
windows10-2004-x64
1Electric.exe
windows7-x64
7Electric.exe
windows10-2004-x64
7blxstealer.pyc
windows7-x64
3blxstealer.pyc
windows10-2004-x64
3README.md
windows7-x64
3README.md
windows10-2004-x64
3instructions.txt
windows7-x64
1instructions.txt
windows10-2004-x64
1license.txt
windows7-x64
1license.txt
windows10-2004-x64
1Analysis
- max time kernel
119s - max time network
121s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
08/06/2024, 16:09
Behavioral task
behavioral1
Sample
Electric.rar
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Electric.rar
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
ByfronHook.dll.txt
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
ByfronHook.dll.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Electric.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Electric.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
blxstealer.pyc
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
blxstealer.pyc
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
README.md
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
README.md
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
instructions.txt
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
instructions.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
license.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
license.txt
Resource
win10v2004-20240508-en
General
- Target license.txt
- Size 5KB
- Sample240608-tl7jpsea65
- SHA256 78f9b5671c16bf36741046442d44d7ebd438d98fc48665313e8fab791d8efe64
- MD5 cf780f5c4be0b2b591af997c8bcd61e8
- SHA1 524a6b4d7ef16014aed5572f6eed2e17ddc2a7be
- SHA512 ec8b4bb8433a187efbcab06da90572cd53c5b83a175d8805af3d5663b8df6b6b760677b3b02e02371918158af81cdd498830c4a6ce8df88530f3b393621e631c
- SSDEEP 96:uE8hju6h4hCZxg9RgpEGsjXyj1imGF4bdXjk3KpaTkS659kQnx1dBHiSkF9tzK/:uEwjuKsgA4+XYdXjA+okS63vZBCSUze
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2120 NOTEPAD.EXE