Overview

overview

10

Static

static

FTPSet.exe

windows7_x64

10

FTPSet.exe

windows10-2004_x64

10

FtpSrv.exe

windows7_x64

10

FtpSrv.exe

windows10-2004_x64

10

QB903D.exe

windows7_x64

1

QB903D.exe

windows10-2004_x64

1

ecgdb.exe

windows7_x64

1

ecgdb.exe

windows10-2004_x64

1

ecgpaint.exe

windows7_x64

10

ecgpaint.exe

windows10-2004_x64

10

imgctl.dll

windows7_x64

10

imgctl.dll

windows10-2004_x64

10

sysdef.dll

windows7_x64

10

sysdef.dll

windows10-2004_x64

10

tcpip.exe

windows7_x64

10

tcpip.exe

windows10-2004_x64

10

Resubmissions

16-06-2022 11:45

220616-nwzzqahca6 10

16-06-2022 02:20

220616-cswmcafehr 10

Analysis

  • max time kernel
    161s
  • max time network
    185s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    16-06-2022 02:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ecgdb.exe

  • Size

    252KB

  • MD5

    055214d1cc50f611b599cbd8debbf077

  • SHA1

    7332eb0aadea8dc467cf5325c078fad30da00f48

  • SHA256

    c33ad9c778ca78fb5c56a525c9e65a6ae9d730a09f2df6d1d87d9a398bf7b01b

  • SHA512

    f39ee92e564513f865ef144239ae43a935451dd8452f6f553d60ff106ecae3dbb942b111c33da2b20632cdcf9acc548d1261fe054a734d0ae2e629ffdf3d1065

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ecgdb.exe
    "C:\Users\Admin\AppData\Local\Temp\ecgdb.exe"
    1⤵
      PID:4644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads