Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ECFHIJKJKF.exe

windows7-x64

10

ECFHIJKJKF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ECFHIJKJKF.exe

  • Size

    2.7MB

  • Sample

    250222-xftmfaxmz5

  • MD5

    d4f872f71cebfc96d63b8fd16fe59ff3

  • SHA1

    249c011ffde1ea311d394e989cc4386f550c682b

  • SHA256

    192c8443cd0910ef43c8b86e00ea336fcd8c83b1b236d5cd4386ce37b1eda168

  • SHA512

    d367cb6ed066ebbc93a7c7e0cf5cbe28a8fd0f08f67c619b1539045e8ca41d1f3a7a3a9985d4e981e1eadf5be4c318eccb7613ab27b863098ad0b29219feba66

  • SSDEEP

    49152:eam9wInUiMWR4bufkBqSk9K5+mUv+F42YcCmph7XZhak:HjMoXUWF4Fmr7XZha

Score
10/10
hijackloaderdiscoveryloader

Malware Config

Targets

    • Target

      ECFHIJKJKF.exe

    • Size

      2.7MB

    • MD5

      d4f872f71cebfc96d63b8fd16fe59ff3

    • SHA1

      249c011ffde1ea311d394e989cc4386f550c682b

    • SHA256

      192c8443cd0910ef43c8b86e00ea336fcd8c83b1b236d5cd4386ce37b1eda168

    • SHA512

      d367cb6ed066ebbc93a7c7e0cf5cbe28a8fd0f08f67c619b1539045e8ca41d1f3a7a3a9985d4e981e1eadf5be4c318eccb7613ab27b863098ad0b29219feba66

    • SSDEEP

      49152:eam9wInUiMWR4bufkBqSk9K5+mUv+F42YcCmph7XZhak:HjMoXUWF4Fmr7XZha

    Score
    10/10
    hijackloaderdiscoveryloader

    • Detects HijackLoader (aka IDAT Loader)

    • HijackLoader

      HijackLoader is a multistage loader first seen in 2023.

      loaderhijackloader

    • Hijackloader family

      hijackloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks