General
- Target Ecard7359.exe
- Size 34.0MB
- Sample250923-tm1sjstsdz
- SHA256 034dd6cda862b97bd76b652106b19bf5ec86b6e3e6491a5abfbf3a5261562d82
- MD5 3a9e6ec34d9bf007b0f58a63461f7df3
- SHA1 ca0a1c3cc8cbbeb53d7dc664463f42c6c06e999b
- SHA512 4f203aab48c54dc1fea14166f1c41093f5be7ef69d0a774cced522fd18b85f9aec770e17a98b513a61f78ca5cd0fa1c1a8e8fe866e728561cf053d16bc2f4403
- SSDEEP 786432:OYO/jkCgBhtUKPUOFMJGe5cfD7aR65lIBE7ZVWhro/fraaXcT:K/jkCgpPUK8PyL7M8aE1VWhroHFcT
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Ecard7359.exe
Resource
win10v2004-20250619-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ecard7359.exe
Resource
win11-20250610-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Ecard7359.exe
- Size 34.0MB
- SHA256 034dd6cda862b97bd76b652106b19bf5ec86b6e3e6491a5abfbf3a5261562d82
- MD5 3a9e6ec34d9bf007b0f58a63461f7df3
- SHA1 ca0a1c3cc8cbbeb53d7dc664463f42c6c06e999b
- SHA512 4f203aab48c54dc1fea14166f1c41093f5be7ef69d0a774cced522fd18b85f9aec770e17a98b513a61f78ca5cd0fa1c1a8e8fe866e728561cf053d16bc2f4403
- SSDEEP 786432:OYO/jkCgBhtUKPUOFMJGe5cfD7aR65lIBE7ZVWhro/fraaXcT:K/jkCgpPUK8PyL7M8aE1VWhroHFcT
- MD5 SHA1 SHA512 SSDEEP
Modifies file permissions
Modifies Windows Firewall
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Disable or Modify System Firewall
1