Overview
overview
6Static
static
3ef_command...CW.exe
windows10-2004-x64
6ef_command...CW.exe
windows11-ltsc_2024-x64
6ef_command...DE.chm
windows10-2004-x64
1ef_command...DE.chm
windows11-ltsc_2024-x64
1ef_command...US.chm
windows10-2004-x64
1ef_command...US.chm
windows11-ltsc_2024-x64
1ef_command...EP.exe
windows10-2004-x64
1ef_command...EP.exe
windows11-ltsc_2024-x64
1ef_command...32.dll
windows10-2004-x64
1ef_command...32.dll
windows11-ltsc_2024-x64
1ef_command...h2.dll
windows10-2004-x64
1ef_command...h2.dll
windows11-ltsc_2024-x64
1ef_command...0u.dll
windows10-2004-x64
1ef_command...0u.dll
windows11-ltsc_2024-x64
1ef_command...32.dll
windows10-2004-x64
1ef_command...32.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/08/2026, 02:20
Static task
static1
Behavioral task
behavioral1
Sample
ef_commander_64/EFCW.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ef_commander_64/EFCW.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ef_commander_64/EFCW_DE.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ef_commander_64/EFCW_DE.chm
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
ef_commander_64/EFCW_US.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ef_commander_64/EFCW_US.chm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
ef_commander_64/EFEP.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ef_commander_64/EFEP.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
ef_commander_64/libeay32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ef_commander_64/libeay32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
ef_commander_64/libssh2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ef_commander_64/libssh2.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
ef_commander_64/sqx20u.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ef_commander_64/sqx20u.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ef_commander_64/ssleay32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ef_commander_64/ssleay32.dll
Resource
win11ltsc2024-20260709-en
General
- Target ef_commander_64/EFCW_US.chm
- Size 139KB
- Sample260825-cskvvawcne
- SHA256 37813b6adbd4b6446dc35e9bb23fbb6c8e2fc4f580b81720b68f3679f7fcacaa
- MD5 1f106f0069fa1618f34c019a867702d4
- SHA1 c8ed8a4721ab7bf1507169d2dbd0ae0ea344f529
- SHA512 9bc85d763c4e0c50be7acdd411ce9f51e538ae6f0f3b281885da19f0fc1938a102296fed33c2c435d95a894dddc1c5c7884216fc62c3787d635f65d28baebe1b
- SSDEEP 3072:naHQ26rTe2E0URJq630gtsb7zQsL4QZjHlQD+NzOoOODhg8jKcx:nayS2E0+tt03rsQZjHs+NzvDS8jKcx
- TLSH T153D312700A7E5038E0A95631F7931A7D00A7762AE4A5611F8B633D19C7BEB81FF41F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 880 hh.exe 880 hh.exe