4b06ec6ebe8bf2c37a99083e8d8f592a99572a4691aad07b22ef16d43de8494f

Analysis

max time kernel
12s
max time network
20s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
02/11/2024, 10:46

Target
ElectronV3/ElectronV3.exe
Size 37.8MB
Sample241102-mvb1tsvkdn
SHA256 9372ae0dcd737e61bfa791161ece3728963129c707fe7af5cc710be56c459b79
MD5 8fe4c19f89235c08d6676afba340c5b4
SHA1 198d1576fa13ba1147b0ccf01e4aba9886ae44e3
SHA512 8e17449cf72c3dea91a5ebac6e477291d63a0341bd673fb0453c8271dc913a34dfaa87143b806e66eb704778890f187416f88615768b6df9f184955d77b584d8
SSDEEP 786432:WCXvCOtmPf155bG8YCQDf4ejpmFBa3feLeKyQh/7K4rv3Fqbd:WAvCOUX5LdSrjpmFTLEw/GUqbd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2856	ElectronV3.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral3/files/0x000500000001a404-47.dat	upx
behavioral3/memory/2856-49-0x000007FEF6430000-0x000007FEF6895000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 2856	2736	ElectronV3.exe	30
PID 2736 wrote to memory of 2856	2736	ElectronV3.exe	30
PID 2736 wrote to memory of 2856	2736	ElectronV3.exe	30

C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe
"C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe
  "C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe"
  2⤵
  - Loads dropped DLL
  PID:2856

python310.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI27362\python310.dll
Size 1.4MB
SHA256 3a7d497d779ff13082835834a1512b0c11185dd499ab86be830858e7f8aaeb3e
MD5 90d5b8ba675bbb23f01048712813c746
SHA1 f2906160f9fc2fa719fea7d37e145156742ea8a7
SHA512 872c2bf56c3fe180d9b4fb835a92e1dc188822e9d9183aab34b305408bb82fba1ead04711e8ad2bef1534e86cd49f2445d728851206d7899c1a7a83e5a62058e
SSDEEP 24576:4fng8rkHg8NdzWjg0oHc47V2tioO8pxPusuwy+l6JrHqfgmCrxSyCNpsDpSZzjFx:QrQAkzWnoHc452tlpxPOi6JrqIBSyCN2
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2856-49-0x000007FEF6430000-0x000007FEF6895000-memory.dmp

Download