Overview
overview
6Static
static
3ef_command...CW.exe
windows10-2004-x64
6ef_command...CW.exe
windows11-ltsc_2024-x64
6ef_command...DE.chm
windows10-2004-x64
1ef_command...DE.chm
windows11-ltsc_2024-x64
1ef_command...US.chm
windows10-2004-x64
1ef_command...US.chm
windows11-ltsc_2024-x64
1ef_command...EP.exe
windows10-2004-x64
1ef_command...EP.exe
windows11-ltsc_2024-x64
1ef_command...32.dll
windows10-2004-x64
1ef_command...32.dll
windows11-ltsc_2024-x64
1ef_command...h2.dll
windows10-2004-x64
1ef_command...h2.dll
windows11-ltsc_2024-x64
1ef_command...0u.dll
windows10-2004-x64
1ef_command...0u.dll
windows11-ltsc_2024-x64
1ef_command...32.dll
windows10-2004-x64
1ef_command...32.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
138s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/08/2026, 02:20
Static task
static1
Behavioral task
behavioral1
Sample
ef_commander_64/EFCW.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ef_commander_64/EFCW.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ef_commander_64/EFCW_DE.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ef_commander_64/EFCW_DE.chm
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
ef_commander_64/EFCW_US.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ef_commander_64/EFCW_US.chm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
ef_commander_64/EFEP.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ef_commander_64/EFEP.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
ef_commander_64/libeay32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ef_commander_64/libeay32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
ef_commander_64/libssh2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ef_commander_64/libssh2.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
ef_commander_64/sqx20u.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ef_commander_64/sqx20u.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ef_commander_64/ssleay32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ef_commander_64/ssleay32.dll
Resource
win11ltsc2024-20260709-en
General
- Target ef_commander_64/EFCW_DE.chm
- Size 1.5MB
- Sample260825-cskvvawcne
- SHA256 ed97e39206510a272ee56487dc6e91fa78d70940b47742939a911a8de3b252a6
- MD5 8bbc80b9c4c54ba4debd2f10b46f5998
- SHA1 30a24fa1bec4669e78c0ef6da4d9392504d36215
- SHA512 2ef5697180946a4453c5ed30aad0e992cc9f0e29da6d23efcc32baf26a1ff958e547be6698b0e5724444f3e5c009cb62439fa21a819cb3efd301231561a04e68
- SSDEEP 24576:b8pkNN85be6OvYHaZ6C+A0nCnaSygMK9zOuj9Kip2eZwCHhhqdxTR4UFTLfgSwdK:Q40beV/Z6C+m74K4i9KgHTCF9dfg/dK
- TLSH T145753376641E3119C3EECA3DFAC63D4E828170F0E62419C7939F180AF67ABD6D25244B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4908 hh.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4908 hh.exe 4908 hh.exe