0df18ecef55a3c251ee62a5c6253b82d7d970b5312a9f399a1731405b73a2793

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-11-2024 15:15

Target

ElectronV3.exe
Size

37.8MB
MD5

1cbe8585b431cf47c67d346873d73b86
SHA1

411627116f8ad58fac2bcd805871d3eedaeea29b
SHA256

0df18ecef55a3c251ee62a5c6253b82d7d970b5312a9f399a1731405b73a2793
SHA512

733d1256d97298c87f17b814b6edcc29ff12832258e184126a8416cc6d3b241dca5caf15022e7b84e5b4465c2b587adbfd0128b3e4714127daa51ec6676bef7f
SSDEEP

786432:JG0CL9iGLQyZFu8HkDC/UbUjfge+1y3GIwAZ5eiGg1iEc2dQ/7K4rv3FqbE:JG0CwG3q87/EU41qVjGg1i/uQ/GUqbE

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2592	ElectronV3.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000500000001a4ee-47.dat	upx
behavioral1/memory/2592-49-0x000007FEF5CD0000-0x000007FEF6135000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 2592	2112	ElectronV3.exe	30
PID 2112 wrote to memory of 2592	2112	ElectronV3.exe	30
PID 2112 wrote to memory of 2592	2112	ElectronV3.exe	30

C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe
"C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2112
- C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe
  "C:\Users\Admin\AppData\Local\Temp\ElectronV3.exe"
  2⤵
  - Loads dropped DLL
  PID:2592

C:\Users\Admin\AppData\Local\Temp\_MEI21122\python310.dll

Filesize
1.4MB

MD5
90d5b8ba675bbb23f01048712813c746

SHA1
f2906160f9fc2fa719fea7d37e145156742ea8a7

SHA256
3a7d497d779ff13082835834a1512b0c11185dd499ab86be830858e7f8aaeb3e

SHA512
872c2bf56c3fe180d9b4fb835a92e1dc188822e9d9183aab34b305408bb82fba1ead04711e8ad2bef1534e86cd49f2445d728851206d7899c1a7a83e5a62058e

Download Submit
memory/2592-49-0x000007FEF5CD0000-0x000007FEF6135000-memory.dmp

Filesize
4.4MB

Download