Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21-07-2024 17:48
Behavioral task
behavioral1
Sample
ELETRON.CRACKED.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ELETRON.CRACKED.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Stub.pyc
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Stub.pyc
Resource
win10v2004-20240709-en
General
-
Target
ELETRON.CRACKED.exe
-
Size
11.8MB
-
MD5
e1a7232e64b20edc812373e57c87abb4
-
SHA1
b94d4231ed94e7573861973a0899a4406e8e69d4
-
SHA256
42125fea3a55fdff20c9c2ecae70784bb9207beec55f47dd963a9c594c1ba490
-
SHA512
94fe4d9d46b029b3cfa59a4b62d5815b081a34281e8a80b1c7a4a20bd16dcc9dada85b5ecfbc539c20a8bf0456c31dc54ffa2758a36c00aecba3d70e04e89c80
-
SSDEEP
196608:hLT0PA+Jb3tQk5tOeNvX+wfm/pf+xfdkRGZWKsnwrIWOzW0DaqkH:x9+7v5tRvX+9/pWFGRsBsnwrIWeRaDH
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2792 ELETRON.CRACKED.exe -
resource yara_rule behavioral1/files/0x000500000001a4a4-45.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 388 wrote to memory of 2792 388 ELETRON.CRACKED.exe 31 PID 388 wrote to memory of 2792 388 ELETRON.CRACKED.exe 31 PID 388 wrote to memory of 2792 388 ELETRON.CRACKED.exe 31
Processes
-
C:\Users\Admin\AppData\Local\Temp\ELETRON.CRACKED.exe"C:\Users\Admin\AppData\Local\Temp\ELETRON.CRACKED.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:388 -
C:\Users\Admin\AppData\Local\Temp\ELETRON.CRACKED.exe"C:\Users\Admin\AppData\Local\Temp\ELETRON.CRACKED.exe"2⤵
- Loads dropped DLL
PID:2792
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5db09c9bbec6134db1766d369c339a0a1
SHA1c156d9f2d0e80b4cf41794cd9b8b1e8a352e0a0b
SHA256b1aac1e461174bbae952434e4dac092590d72b9832a04457c94bd9bb7ee8ad79
SHA512653a7fff6a2b6bffb9ea2c0b72ddb83c9c53d555e798eea47101b0d932358180a01af2b9dab9c27723057439c1eaffb8d84b9b41f6f9cd1c3c934f1794104d45