3e783b5a0ca45a430bfc7e7cee4d4331abd55d91e0da870daf724e24bf812b6f

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 23:27

Target

ElectronV3/ElectronV3.exe
Size

37.8MB
MD5

3b3a67fbdef30c60edace57f0879f62f
SHA1

b80ec72cd264e01798ba523fbb3cd76655663e21
SHA256

c277b4a4e4e38ec0667f01e9486eeb516caf589e24b7c573852dbc555c162666
SHA512

b1d4dba1f15ca87a1140e8ce7a21e791adbea46d525de549c46aa9128d12605e7eee1b1d4dbe5971604a5f0a2bca4a181579ecc54abcb080006f60bcd1ffe976
SSDEEP

786432:vpE/xQlr4/n82Vf0ZpGRexsQGj22uJBxffo8CXIs5qiI7/7K4rv3Fqb1:hc2lr4/n9gpGash48XIeG7/GUqb1

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2836	ElectronV3.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000500000001a4c5-47.dat	upx
behavioral1/memory/2836-49-0x000007FEF6580000-0x000007FEF69E5000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2504 wrote to memory of 2836	2504	ElectronV3.exe	30
PID 2504 wrote to memory of 2836	2504	ElectronV3.exe	30
PID 2504 wrote to memory of 2836	2504	ElectronV3.exe	30

C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe
"C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2504
- C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe
  "C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe"
  2⤵
  - Loads dropped DLL
  PID:2836

C:\Users\Admin\AppData\Local\Temp\_MEI25042\python310.dll

Filesize
1.4MB

MD5
90d5b8ba675bbb23f01048712813c746

SHA1
f2906160f9fc2fa719fea7d37e145156742ea8a7

SHA256
3a7d497d779ff13082835834a1512b0c11185dd499ab86be830858e7f8aaeb3e

SHA512
872c2bf56c3fe180d9b4fb835a92e1dc188822e9d9183aab34b305408bb82fba1ead04711e8ad2bef1534e86cd49f2445d728851206d7899c1a7a83e5a62058e

Download Submit
memory/2836-49-0x000007FEF6580000-0x000007FEF69E5000-memory.dmp

Filesize
4.4MB

Download