ed8d19c843f0c321d9ceb1201d78d9ded4f8685705706b620a250e3ea59adeb9

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 20:08

Target

Electron V3/ElectronV3.exe
Size

37.2MB
MD5

35ff4b8cfa381b8c421d7f4278e5eea2
SHA1

c686165b7dd71d48433e5298be2fec7e6c6b64dd
SHA256

fec6107f08e216d76cf05ee65f1894de778b386b61cb6c459f6c0f6657de2c6f
SHA512

0f31fc013005b38cb0be2cd33780627364e4e70683670bbc0ab3ffd154c229b97dacffc895c503a4c8689f4d627ec5e6b3e69394871349ccd6c64977d11b4e0e
SSDEEP

786432:y9OQxKKj1YqIdryuIjHNOgi5EMkhqN+NhAiJ1piKvIeVrsgv3FdbfitHJblxb:EOQAKjSqMhIjHNm5Dkq4bAodvIeVrhdO

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2488	ElectronV3.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral3/files/0x000400000001c9ce-129.dat	upx
behavioral3/memory/2488-131-0x000007FEF68A0000-0x000007FEF6D05000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1928 wrote to memory of 2488	1928	ElectronV3.exe	30
PID 1928 wrote to memory of 2488	1928	ElectronV3.exe	30
PID 1928 wrote to memory of 2488	1928	ElectronV3.exe	30

C:\Users\Admin\AppData\Local\Temp\Electron V3\ElectronV3.exe
"C:\Users\Admin\AppData\Local\Temp\Electron V3\ElectronV3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1928
- C:\Users\Admin\AppData\Local\Temp\Electron V3\ElectronV3.exe
  "C:\Users\Admin\AppData\Local\Temp\Electron V3\ElectronV3.exe"
  2⤵
  - Loads dropped DLL
  PID:2488

C:\Users\Admin\AppData\Local\Temp\_MEI19282\python310.dll

Filesize
1.4MB

MD5
fea8b50c9cd4738b0ca28fe61705a77d

SHA1
fb84ab201b017ca27099558b6fb26701efe9612b

SHA256
56cd8356f6e4d4bde52672f58cc657f527cd07f67207bfb17afa0017f3f5d325

SHA512
21d98cb5b87a7c553ec2f1f935987731d2d9ce788f27746f1255fb0a475ae832453f7672081d06fdc31774e0ed64bb6855f4daa9f099bb0ac37179cd491bbe10

Download Submit
memory/2488-131-0x000007FEF68A0000-0x000007FEF6D05000-memory.dmp

Filesize
4.4MB

Download