Overview
overview
7Static
static
3ec_menu.zip
windows10-2004-x64
1ec_menu.zip
windows11-21h2-x64
1EcMenu_v1....nu.exe
windows10-2004-x64
3EcMenu_v1....nu.exe
windows11-21h2-x64
3EcMenu_v1....64.exe
windows10-2004-x64
3EcMenu_v1....64.exe
windows11-21h2-x64
3EcMenu_v1....nu.ini
windows10-2004-x64
1EcMenu_v1....nu.ini
windows11-21h2-x64
3EcMenu_v1....64.exe
windows10-2004-x64
3EcMenu_v1....64.exe
windows11-21h2-x64
3EcMenu_v1....86.exe
windows10-2004-x64
3EcMenu_v1....86.exe
windows11-21h2-x64
3EcMenu_v1....ms.ini
windows10-2004-x64
1EcMenu_v1....ms.ini
windows11-21h2-x64
3EcMenu_v1....me.txt
windows10-2004-x64
1EcMenu_v1....me.txt
windows11-21h2-x64
3EcMenu_v1....ol.ico
windows10-2004-x64
3EcMenu_v1....ol.ico
windows11-21h2-x64
3EcMenu_v1....ol.vbs
windows10-2004-x64
7EcMenu_v1....ol.vbs
windows11-21h2-x64
3EcMenu_v1....es.ico
windows10-2004-x64
3EcMenu_v1....es.ico
windows11-21h2-x64
3EcMenu_v1....es.vbs
windows10-2004-x64
7EcMenu_v1....es.vbs
windows11-21h2-x64
1EcMenu_v1....e.html
windows10-2004-x64
7EcMenu_v1....e.html
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/05/2026, 15:03
Static task
static1
Behavioral task
behavioral1
Sample
ec_menu.zip
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
ec_menu.zip
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EcMenu_v1.6/EcMenu.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
EcMenu_v1.6/EcMenu.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EcMenu_v1.6/EcMenu_x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
EcMenu_v1.6/EcMenu_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EcMenu_v1.6/Files/EcMenu.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
EcMenu_v1.6/Files/EcMenu.ini
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
EcMenu_v1.6/Files/EcMenuCmd_x64.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
EcMenu_v1.6/Files/EcMenuCmd_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
EcMenu_v1.6/Files/EcMenuCmd_x86.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
EcMenu_v1.6/Files/EcMenuCmd_x86.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
EcMenu_v1.6/Files/Items.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
EcMenu_v1.6/Files/Items.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
EcMenu_v1.6/Files/Readme.txt
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
EcMenu_v1.6/Files/Readme.txt
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.ico
Resource
win10v2004-20250619-en
Behavioral task
behavioral18
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.ico
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
EcMenu_v1.6/Files/SnippingTool/SnippingTool.vbs
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.ico
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.ico
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
EcMenu_v1.6/Files/StickyNotes/StickyNotes.vbs
Resource
win11-20250610-en
Behavioral task
behavioral25
Sample
EcMenu_v1.6/Read_me.html
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
EcMenu_v1.6/Read_me.html
Resource
win11-20260130-en
General
- Target EcMenu_v1.6/EcMenu_x64.exe
- Size 1.1MB
- Sample260508-sfbdmsdy9p
- SHA256 4fc2ccf80f1da2b3db3f1e03a343865e255a176637fbb39b4dfe790692c7e250
- MD5 d4cae9981946b6e2fb1cf52eedd10261
- SHA1 721e03a68539a11c72a0be3849dbb34a4989e3fa
- SHA512 9e87da78766b2f362961fd6218b453155fa8690c0640165752c5b7951767e7c24b0e4828799ffa44ac7fd1623290ef4c65e4c591b767e2f558d23c04046b65d8
- SSDEEP 24576:+2DW/xb2X2YIbpQsu3/PNLlQ7HyR12Cv7OubJmnFNmmFx:+2EiXoQsW/PNhQLJFjFNmW
- TLSH T1AA45AF55F6A444A8C43EE076CE46C22BE2B1BC09977597DF07A05E6A2F33BD06937321
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1860 EcMenu_x64.exe 1860 EcMenu_x64.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1860 EcMenu_x64.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1860 EcMenu_x64.exe