6e4f7670d72e999aedc9900acdca373e8e7ae6fff858d19c2c6c005028292e3a | Triage™

Login
Reports

Overview

overview

6

Static

static

1

etc1tool.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
etc1tool.exe
Size 435KB
Sample260716-vmvf7shw9p
SHA256 6e4f7670d72e999aedc9900acdca373e8e7ae6fff858d19c2c6c005028292e3a
MD5 f411c30a7aa4ff7a3311f21621868ba1
SHA1 48a73394e593018ee2588e2d2dbbf3b565980a0d
SHA512 79b32f710e9b0b10e5ecd135d8e1e14abc22d148f7a784b0daf7a45da3b7c06686a5189ec108c60e67da323b644271b213e3418e63cb30f7f09987a94a257fe7
SSDEEP 6144:N4DVUCs6Sxxke7u8reqDjCXVars3fQiRqPqjx26y+IMUyM7K/PZI3rn3IqhM5j4M:N4D5slxxkejr5+nXJbaKJYSr
TLSH
T10C94AE8362F2A0B6E96341F0A7DEA37D4E105210CB364CEBC2D4DDB0AD96AD1197E71D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence ransomware

Static task

static1

Behavioral task

behavioral1

Sample

etc1tool.exe

Resource

win11-20260513-en

windows11-21h2-x64

30 signatures

900 seconds

defense_evasion discovery persistence ransomware

Malware Config

Targets

- Target
  etc1tool.exe
- Size 435KB
- SHA256 6e4f7670d72e999aedc9900acdca373e8e7ae6fff858d19c2c6c005028292e3a
- MD5 f411c30a7aa4ff7a3311f21621868ba1
- SHA1 48a73394e593018ee2588e2d2dbbf3b565980a0d
- SHA512 79b32f710e9b0b10e5ecd135d8e1e14abc22d148f7a784b0daf7a45da3b7c06686a5189ec108c60e67da323b644271b213e3418e63cb30f7f09987a94a257fe7
- SSDEEP 6144:N4DVUCs6Sxxke7u8reqDjCXVars3fQiRqPqjx26y+IMUyM7K/PZI3rn3IqhM5j4M:N4D5slxxkejr5+nXJbaKJYSr
- TLSH
  T10C94AE8362F2A0B6E96341F0A7DEA37D4E105210CB364CEBC2D4DDB0AD96AD1197E71D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence ransomware
- Downloads MZ/PE file
- Drops file in System32 directory
- Probable phishing domain
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceransomware

© 2018-2026

Terms | Privacy