fd0544bdeb691b88a388b2a51da072c4de37b5f7d9af2a1948d45aed755a80a2

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/06/2024, 16:09

Target
Electric.exe
Size 38.4MB
Sample240608-tl7jpsea65
SHA256 f3f320aaa33ac382221a897fd5659e8f2a10d7f2e3fa787ef096c87623ff1139
MD5 a597071630f5e4d0c73e96dca55204ff
SHA1 489ec09902c01d9b302e2d74cf55b251daa1a529
SHA512 2ffa8955b5e10bce71db2c098557db074967bf6c02e31819bfd03d9ddac91c191c19cc1a557c2c1d839b96f649c8a837cadebdf7f31f5712918a26f0c06138f0
SSDEEP 786432:74eK0Q/sYQF9dQuh2j6+s7LWB75zuOOojDorvS6tKzZLkrgY:02Q/sz9x2qHWB75i2yF4zSF
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1668	Electric.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2320 wrote to memory of 1668	2320	Electric.exe	28
PID 2320 wrote to memory of 1668	2320	Electric.exe	28
PID 2320 wrote to memory of 1668	2320	Electric.exe	28

C:\Users\Admin\AppData\Local\Temp\Electric.exe
"C:\Users\Admin\AppData\Local\Temp\Electric.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2320
- C:\Users\Admin\AppData\Local\Temp\Electric.exe
  "C:\Users\Admin\AppData\Local\Temp\Electric.exe"
  2⤵
  - Loads dropped DLL
  PID:1668

python310.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI23202\python310.dll
Size 4.3MB
SHA256 156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
MD5 deaf0c0cc3369363b800d2e8e756a402
SHA1 3085778735dd8badad4e39df688139f4eed5f954
SHA512 5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989
SSDEEP 49152:m/4rIQeEKdN4uxzx1njuYWxKLx5NFnb7d1G2F58rkx7qzMJYlf1GCJLvNyoInO3V:mS7q35VNFnlRqT84NAnYHAMDlPK0r
MD5 SHA1 SHA512 SSDEEP

Submit Download

INSTALLER

Path C:\Users\Admin\AppData\Local\Temp\_MEI23202\wheel-0.43.0.dist-info\INSTALLER
Size 4B
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
MD5 SHA1 SHA512

Submit Download