Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-es
  • resource tags

    arch:x64arch:x86image:win7-20240708-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    06-09-2024 03:03

General

  • Target

    ElectronV3.exe

  • Size

    11.1MB

  • MD5

    dd50ab40bc0ceeea383c132cc9ea965c

  • SHA1

    c0ede9f69a2fcd7965e980654413854804e48ff9

  • SHA256

    ebd33124981919a44841c9e215f91f622843ab2ea0c96cf1bcd44a82feb4dc1f

  • SHA512

    fdec36007807500ae41b0afd400ef6727edb2ecd40646c41e76fbf4e6a86e49fab580fee57601972005adc0cbf7cda3be06d10e7da07deb7798dac8b887d098c

  • SSDEEP

    196608:iW4JauwOFC/PAGJb3tQk5tieNvX+wfm/pf+xfdkRUyTlKArwWOtW0DaF1H:WIusAG7v5ttvX+9/pWFGRBAArwWIRajH

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe
    "C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1900
    • C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe
      "C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe"
      2⤵
      • Loads dropped DLL
      PID:2840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI19002\python311.dll

    Filesize

    1.6MB

    MD5

    db09c9bbec6134db1766d369c339a0a1

    SHA1

    c156d9f2d0e80b4cf41794cd9b8b1e8a352e0a0b

    SHA256

    b1aac1e461174bbae952434e4dac092590d72b9832a04457c94bd9bb7ee8ad79

    SHA512

    653a7fff6a2b6bffb9ea2c0b72ddb83c9c53d555e798eea47101b0d932358180a01af2b9dab9c27723057439c1eaffb8d84b9b41f6f9cd1c3c934f1794104d45

  • memory/2840-43-0x000007FEF6AC0000-0x000007FEF70A8000-memory.dmp

    Filesize

    5.9MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.