Analysis
- max time kernel
133s - max time network
135s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system - submitted
08/06/2024, 16:18
Behavioral task
behavioral1
Sample
Electric.rar
Resource
win10-20240404-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ByfronHook.dll.txt
Resource
win10-20240404-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Electric.exe
Resource
win10-20240404-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
blxstealer.pyc
Resource
win10-20240404-en
7 signatures
150 seconds
Behavioral task
behavioral5
Sample
README.md
Resource
win10-20240404-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
instructions.txt
Resource
win10-20240404-en
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
license.txt
Resource
win10-20240404-en
1 signatures
150 seconds
General
- Target ByfronHook.dll.txt
- Size 481B
- Sample240608-tr5bjadb81
- SHA256 bc9b870d92e2155dc0480d22e4093722af7a8b89ab1bcfc3a73b5130f8049985
- MD5 e3dcca7a93f4f4faccde944da1a107b1
- SHA1 20d852207d5946137cd26eec194f6ff981e77c74
- SHA512 aefd1b6ba29ad9cb12f95e5a2c27a1a503d52da0cdc9c47f1243eb6bb56e45788734b5b56910515e878a96436e498a1c67015a9ee55d58737eea54ff966fbe2c
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 516 NOTEPAD.EXE