General
- Target ecore-launch.exe
- Size 8.0MB
- Sample260705-l44lrsbw71
- SHA256 60b17488cbbda7313aa68d2eacfacde48dcad9e871efb8a771e71a49be20ba7e
- MD5 cfec77eb0496a5d28a14eb55ea14def5
- SHA1 9ecdff2d8c34208c3a1a11d5d8a3fb4b9889b343
- SHA512 d64f60e8c9abaec4815329af9b72f9de93030d6105c9c8fa6eea62aed910dc46b1adf32f4dbd3180d4049c15f7f859b3a87922638e708cdc186bc2c13765fe46
- SSDEEP 49152:nq1zhE4HXMZWF7ApC/0B5WvuwUAOdL6UhW29s8K:nabVOdUJ
- TLSH T10886AF03E9541CBAE717D2B9A00E6067AF51B8A43B7502E7297CA3A55FF37D04878B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ecore-launch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ecore-launch.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target ecore-launch.exe
- Size 8.0MB
- SHA256 60b17488cbbda7313aa68d2eacfacde48dcad9e871efb8a771e71a49be20ba7e
- MD5 cfec77eb0496a5d28a14eb55ea14def5
- SHA1 9ecdff2d8c34208c3a1a11d5d8a3fb4b9889b343
- SHA512 d64f60e8c9abaec4815329af9b72f9de93030d6105c9c8fa6eea62aed910dc46b1adf32f4dbd3180d4049c15f7f859b3a87922638e708cdc186bc2c13765fe46
- SSDEEP 49152:nq1zhE4HXMZWF7ApC/0B5WvuwUAOdL6UhW29s8K:nabVOdUJ
- TLSH T10886AF03E9541CBAE717D2B9A00E6067AF51B8A43B7502E7297CA3A55FF37D04878B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.