Overview
overview
10Static
static
3Electron V3.rar
windows10-1703-x64
3Electron V3.rar
windows10-2004-x64
3Electron V...V3.exe
windows10-1703-x64
7Electron V...V3.exe
windows10-2004-x64
10Stub.pyc
windows10-1703-x64
3Stub.pyc
windows10-2004-x64
3Electron V...ee.txt
windows10-1703-x64
1Electron V...ee.txt
windows10-2004-x64
1Electron V...ld.txt
windows10-1703-x64
1Electron V...ld.txt
windows10-2004-x64
1Electron V..._FE.iy
windows10-1703-x64
3Electron V..._FE.iy
windows10-2004-x64
3Analysis
-
max time kernel
1382s -
max time network
1173s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
30-06-2024 16:38
Behavioral task
behavioral1
Sample
Electron V3.rar
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
Electron V3.rar
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Electron V3/ElectronV3.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Electron V3/ElectronV3.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Stub.pyc
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Stub.pyc
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
Electron V3/bin/agree.txt
Resource
win10-20240611-en
Behavioral task
behavioral8
Sample
Electron V3/bin/agree.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Electron V3/scripts/Inf Yield.txt
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Electron V3/scripts/Inf Yield.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Electron V3/workspace/IY_FE.iy
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Electron V3/workspace/IY_FE.iy
Resource
win10v2004-20240508-en
General
-
Target
Stub.pyc
-
Size
799KB
-
MD5
5b1010317f9d2e326825ea6619255c29
-
SHA1
f4ca66a814fc52e579d63cc51ae4f39a7b43ac06
-
SHA256
6d0e0e18ff67fa40b8f2455fcc5953360cf56ba3255fbe45e9fd3f0a6130dd0e
-
SHA512
4eb42ed26aa7a85e8d730dc4c159f54c100af373e368f8d1fd6cebd4093c4bcecf91aea8d5b367d03784a70ee07c54b7f16aeea1d50939ad49bfb2e2221414fb
-
SSDEEP
12288:G+/3RaioJUngD/ong4CR99VIlZ+rY8j7Vjebge1WbF/jbZCQCTrTZu5PfaG:tBxAKZLaIGrY8j7V6bfW5jbingPB
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4360 OpenWith.exe