Overview
overview
8Static
static
3EcoH Clien...er.exe
windows11-21h2-x64
1EcoH Clien...al.exe
windows11-21h2-x64
7EcoH Client/SDL2.dll
windows11-21h2-x64
1EcoH Clien...60.dll
windows11-21h2-x64
1EcoH Clien...60.dll
windows11-21h2-x64
1EcoH Clien...58.dll
windows11-21h2-x64
1EcoH Clien...ry.bat
windows11-21h2-x64
1EcoH Clien...ve.exe
windows11-21h2-x64
1EcoH Clien...re.exe
windows11-21h2-x64
1EcoH Clien...re.dll
windows11-21h2-x64
1EcoH Clien...lp.dll
windows11-21h2-x64
1EcoH Clien...at.exe
windows11-21h2-x64
1EcoH Clien...te.exe
windows11-21h2-x64
1EcoH Clien...dk.dll
windows11-21h2-x64
1EcoH Clien...dl.dll
windows11-21h2-x64
1EcoH Clien...rl.dll
windows11-21h2-x64
8EcoH Clien...pe.dll
windows11-21h2-x64
1EcoH Clien...gg.dll
windows11-21h2-x64
1EcoH Clien...us.dll
windows11-21h2-x64
1EcoH Clien...le.dll
windows11-21h2-x64
1EcoH Clien...16.dll
windows11-21h2-x64
1EcoH Clien...-0.dll
windows11-21h2-x64
1EcoH Clien...-1.dll
windows11-21h2-x64
1EcoH Clien...07.exe
windows11-21h2-x64
1EcoH Clien...ff.exe
windows11-21h2-x64
1EcoH Clien...ct.exe
windows11-21h2-x64
1EcoH Clien...lp.dll
windows11-21h2-x64
1EcoH Clien...e3.dll
windows11-21h2-x64
1EcoH Clien...pi.dll
windows11-21h2-x64
1EcoH Clien...-4.dll
windows11-21h2-x64
1EcoH Clien...-7.dll
windows11-21h2-x64
1EcoH Clien...rv.dll
windows11-21h2-x64
1Analysis
-
max time kernel
87s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240611-en -
resource tags
arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system -
submitted
18-06-2024 15:00
Behavioral task
behavioral1
Sample
EcoH Client/DDNet-Server.exe
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
EcoH Client/Eco-H Revival.exe
Resource
win11-20240611-en
Behavioral task
behavioral3
Sample
EcoH Client/SDL2.dll
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
EcoH Client/avcodec-60.dll
Resource
win11-20240611-en
Behavioral task
behavioral5
Sample
EcoH Client/avformat-60.dll
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
EcoH Client/avutil-58.dll
Resource
win11-20240419-en
Behavioral task
behavioral7
Sample
EcoH Client/config_directory.bat
Resource
win11-20240508-en
Behavioral task
behavioral8
Sample
EcoH Client/config_retrieve.exe
Resource
win11-20240508-en
Behavioral task
behavioral9
Sample
EcoH Client/config_store.exe
Resource
win11-20240611-en
Behavioral task
behavioral10
Sample
EcoH Client/dbgcore.dll
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
EcoH Client/dbghelp.dll
Resource
win11-20240611-en
Behavioral task
behavioral12
Sample
EcoH Client/demo_extract_chat.exe
Resource
win11-20240611-en
Behavioral task
behavioral13
Sample
EcoH Client/dilate.exe
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
EcoH Client/discord_game_sdk.dll
Resource
win11-20240611-en
Behavioral task
behavioral15
Sample
EcoH Client/exchndl.dll
Resource
win11-20240611-en
Behavioral task
behavioral16
Sample
EcoH Client/libcurl.dll
Resource
win11-20240611-en
Behavioral task
behavioral17
Sample
EcoH Client/libfreetype.dll
Resource
win11-20240419-en
Behavioral task
behavioral18
Sample
EcoH Client/libogg.dll
Resource
win11-20240611-en
Behavioral task
behavioral19
Sample
EcoH Client/libopus.dll
Resource
win11-20240611-en
Behavioral task
behavioral20
Sample
EcoH Client/libopusfile.dll
Resource
win11-20240508-en
Behavioral task
behavioral21
Sample
EcoH Client/libpng16-16.dll
Resource
win11-20240508-en
Behavioral task
behavioral22
Sample
EcoH Client/libssp-0.dll
Resource
win11-20240611-en
Behavioral task
behavioral23
Sample
EcoH Client/libwinpthread-1.dll
Resource
win11-20240611-en
Behavioral task
behavioral24
Sample
EcoH Client/map_convert_07.exe
Resource
win11-20240508-en
Behavioral task
behavioral25
Sample
EcoH Client/map_diff.exe
Resource
win11-20240508-en
Behavioral task
behavioral26
Sample
EcoH Client/map_extract.exe
Resource
win11-20240611-en
Behavioral task
behavioral27
Sample
EcoH Client/mgwhelp.dll
Resource
win11-20240508-en
Behavioral task
behavioral28
Sample
EcoH Client/sqlite3.dll
Resource
win11-20240611-en
Behavioral task
behavioral29
Sample
EcoH Client/steam_api.dll
Resource
win11-20240611-en
Behavioral task
behavioral30
Sample
EcoH Client/swresample-4.dll
Resource
win11-20240611-en
Behavioral task
behavioral31
Sample
EcoH Client/swscale-7.dll
Resource
win11-20240419-en
Behavioral task
behavioral32
Sample
EcoH Client/symsrv.dll
Resource
win11-20240508-en
General
-
Target
EcoH Client/discord_game_sdk.dll
-
Size
3.3MB
-
MD5
4402cd4891c256ee40046c6092afdcbf
-
SHA1
914e01743c7591beb79a61417b262caeb23e2c20
-
SHA256
a6b6d7df00a58dc50248d91048578d0fe52182286b487ef89a961fd10467dbd1
-
SHA512
78da4181132a02d7d17ba4b2839018dc43d7d691c8bb01d34e5f7439df9c92951ce687e9487df158c44e764275b45d6800f6629ec2a175cc4ecdf868292291e5
-
SSDEEP
24576:Q/NGmO/w02OFM7zWIyjQYS2tBMPfL+8T14rbXojA4F8eEcu2sqhA+cGRlZVIH06R:3oOiaQAtBMPfCn/WDcGRxIU6iIdAk
Malware Config
Signatures
-
Modifies registry class 1 IoCs
Processes:
rundll32.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1560405787-796225086-678739705-1000_Classes\Local Settings rundll32.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3104 OpenWith.exe