Overview

overview

7

Static

static

3

ByfronHook.dll.txt

windows7-x64

1

ByfronHook.dll.txt

windows10-2004-x64

1

Electric.exe

windows7-x64

7

Electric.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Electric.rar
  • Size 37.9MB
  • Sample240608-v754fadh5t
  • SHA256 fd0544bdeb691b88a388b2a51da072c4de37b5f7d9af2a1948d45aed755a80a2
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target
      ByfronHook.dll.txt
    • Size 481B
    • SHA256 bc9b870d92e2155dc0480d22e4093722af7a8b89ab1bcfc3a73b5130f8049985
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2
    • Target
      Electric.exe
    • Size 38.4MB
    • SHA256 f3f320aaa33ac382221a897fd5659e8f2a10d7f2e3fa787ef096c87623ff1139
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks