5b7905a769e63cff95c5a11898ce070725463f7b1245e201c4c05ee7de75dae0

Resubmissions

09-12-2024 11:36

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-12-2024 11:36

Target

ElectronV3/ElectronV3.exe
Size

10.1MB
MD5

30e0c375ce957f3398f208d487a08950
SHA1

cc3137225c79532f95204d1eebad97b26e02f114
SHA256

dcb6c47949bacabd601226411736bca0a6a043475b366c77d17f997205600923
SHA512

d06ac050da037821d9226bca670652d23840795fbb32443eb83280577c1564e28ed03dc07acb70cf84d22597ee46eacf903138cc8092d76428e6b2d45bc371f0
SSDEEP

196608:DMW+UvypefxfL/TLx4hz7DIxy2eNaHFJMIDJ+gsAGKkRmDTua9:ARqBrTGz7kk6Fqy+gs1K

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2568	ElectronV3.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x000500000001a4f7-53.dat	upx
behavioral1/memory/2568-55-0x000007FEF6860000-0x000007FEF6CCE000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2568	2212	ElectronV3.exe	30
PID 2212 wrote to memory of 2568	2212	ElectronV3.exe	30
PID 2212 wrote to memory of 2568	2212	ElectronV3.exe	30

C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe
"C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe
  "C:\Users\Admin\AppData\Local\Temp\ElectronV3\ElectronV3.exe"
  2⤵
  - Loads dropped DLL
  PID:2568

C:\Users\Admin\AppData\Local\Temp\_MEI22122\python310.dll

Filesize
1.4MB

MD5
fc7bd515b12e537a39dc93a09b3eaad6

SHA1
96f5d4b0967372553cb106539c5566bc184f6167

SHA256
461e008b7cdf034f99a566671b87849772873a175aefec6ed00732976f5c4164

SHA512
a8433d5b403f898e4eeebd72fce08ebad066ca60aeb0b70e2ae78377babc2acbbae2ac91ab20f813cce4b1dc58c2ad6b3868f18cc8ac0fe7be2bff020eb73122

Download Submit
memory/2568-55-0x000007FEF6860000-0x000007FEF6CCE000-memory.dmp

Filesize
4.4MB

Download