Overview
overview
7Static
static
3ec_menu.zip
windows10-2004-x64
1ec_menu.zip
windows11-21h2-x64
1EcMenu_v1....nu.exe
windows10-2004-x64
3EcMenu_v1....nu.exe
windows11-21h2-x64
3EcMenu_v1....64.exe
windows10-2004-x64
3EcMenu_v1....64.exe
windows11-21h2-x64
3EcMenu_v1....nu.ini
windows10-2004-x64
1EcMenu_v1....nu.ini
windows11-21h2-x64
3EcMenu_v1....64.exe
windows10-2004-x64
3EcMenu_v1....64.exe
windows11-21h2-x64
3EcMenu_v1....86.exe
windows10-2004-x64
3EcMenu_v1....86.exe
windows11-21h2-x64
3EcMenu_v1....ms.ini
windows10-2004-x64
1EcMenu_v1....ms.ini
windows11-21h2-x64
3EcMenu_v1....me.txt
windows10-2004-x64
1EcMenu_v1....me.txt
windows11-21h2-x64
3EcMenu_v1....ol.ico
windows10-2004-x64
3EcMenu_v1....ol.ico
windows11-21h2-x64
3EcMenu_v1....ol.vbs
windows10-2004-x64
7EcMenu_v1....ol.vbs
windows11-21h2-x64
3EcMenu_v1....es.ico
windows10-2004-x64
3EcMenu_v1....es.ico
windows11-21h2-x64
3EcMenu_v1....es.vbs
windows10-2004-x64
7EcMenu_v1....es.vbs
windows11-21h2-x64
1EcMenu_v1....e.html
windows10-2004-x64
7EcMenu_v1....e.html
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/05/2026, 15:03
Static task
static1
Behavioral task
behavioral1
Sample
ec_menu.zip
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
ec_menu.zip
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EcMenu_v1.6/EcMenu.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
EcMenu_v1.6/EcMenu.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EcMenu_v1.6/EcMenu_x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
EcMenu_v1.6/EcMenu_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EcMenu_v1.6/Files/EcMenu.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
EcMenu_v1.6/Files/EcMenu.ini
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
EcMenu_v1.6/Files/EcMenuCmd_x64.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
EcMenu_v1.6/Files/EcMenuCmd_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
EcMenu_v1.6/Files/EcMenuCmd_x86.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
EcMenu_v1.6/Files/EcMenuCmd_x86.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
EcMenu_v1.6/Files/Items.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
EcMenu_v1.6/Files/Items.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
EcMenu_v1.6/Files/Readme.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
EcMenu_v1.6/Files/Readme.txt
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.ico
Resource
win10v2004-20250619-en
Behavioral task
behavioral18
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.ico
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.vbs
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.ico
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.ico
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.vbs
Resource
win11-20250610-en
Behavioral task
behavioral25
Sample
EcMenu_v1.6/Read_me.html
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
EcMenu_v1.6/Read_me.html
Resource
win11-20260130-en
General
- Target EcMenu_v1.6/Files/EcMenuCmd_x64.exe
- Size 1.1MB
- Sample260508-sfbdmsdy9p
- SHA256 4d3311ef245d5425b0d066660b881c961f7bf708744e9789f7cae5f662d4d126
- MD5 ea7bb3b4aab029b6a7cbeb81124ed2bf
- SHA1 f27e1d5429e782404d20fd92d1d3feffae11b5d4
- SHA512 bebb45153e80bb60f1a2219bb253b3d628a0ade7da6b59f700c06e37f6888eecf3b35303aa015d5a736d6126b339a15975af60b76098a80a5a1c868ee8bb7586
- SSDEEP 24576:e2DW/xbkX2YIbsQsu3/PNLhQaHyzlICsh0M2eFV:e2EoXVQsW/PNlQS4lICshXdV
- TLSH T1BB358D56B69444E8D47BD4B6C957C53BE6F2BC08677147CB06A07B261E33BE0293B322
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2948 EcMenuCmd_x64.exe 2948 EcMenuCmd_x64.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2948 EcMenuCmd_x64.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\2b9y4q8j.tmp
- Size 5KB
- SHA256 ed1a3b3560030a2101c6ec3a309fba84e7362391c73a34325b366026233da044
- MD5 01469a21726d06a854c6463daaffc9d4
- SHA1 311e3f3a03b2ee4df17822bedeb25bb781789925
- SHA512 a19c6fb8cf1c88d527d2318c42fb2855ca391b3130c5872cd7b2fae5c46f56fdd2293833e2d0a9cc875b459f513fc9f209cc1ab986d17cfced26da7ad3c14f66
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP