Overview

overview

8

Static

static

3

ecome.exe

windows10-ltsc 2021-x64

8

Resubmissions

07-01-2025 09:02

250107-kzxrzswlej 8

07-01-2025 08:16

250107-j6k64atreq 10

17-12-2024 14:09

241217-rf4vhs1mbz 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecome.exe

  • Size

    1.1MB

  • Sample

    241217-rf4vhs1mbz

  • MD5

    387a4f5a3791b3467434add8798e156c

  • SHA1

    3eb4d42ca10ca4705bd8e6411e09b31b8f04914e

  • SHA256

    0ccf18985ae70f2004c2ccc11f470b7bbd0884fce623a606a67b2e4e66916791

  • SHA512

    7ad99b695ca917759de3bb75bc1f449f80b6b8d44b081b2036e4824a82847df4990c21862b49c71da79d3d4c3e115bcb3edea8b10e7a445be66dfa8da9cb1eff

  • SSDEEP

    24576:lPSbyKdceodVn4sgUmwzzjKsjOxXVsCdPd+p:JgxebtgIznKaKsCdPsp

Score
8/10
discoveryexecution

Malware Config

Targets

    • Target

      ecome.exe

    • Size

      1.1MB

    • MD5

      387a4f5a3791b3467434add8798e156c

    • SHA1

      3eb4d42ca10ca4705bd8e6411e09b31b8f04914e

    • SHA256

      0ccf18985ae70f2004c2ccc11f470b7bbd0884fce623a606a67b2e4e66916791

    • SHA512

      7ad99b695ca917759de3bb75bc1f449f80b6b8d44b081b2036e4824a82847df4990c21862b49c71da79d3d4c3e115bcb3edea8b10e7a445be66dfa8da9cb1eff

    • SSDEEP

      24576:lPSbyKdceodVn4sgUmwzzjKsjOxXVsCdPd+p:JgxebtgIznKaKsCdPsp

    Score
    8/10
    discoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses the VBS compiler for execution

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks