SecuriteInfo.com.Win32.Evo-gen.20658.28793
Classification: Malicious
SecuriteInfo.com.Win32.Evo-gen.20658.28793 is a malicious file sample (Windows executable, 797.7 KB). Linked to Ecipekac malware.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ECIPEKAC (S0624)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SigLoader | ThreatFox Abuse.ch | 2024-04-09 17:50:32 | 2024-04-11 17:20:54 | S0624 Ecipekac | |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-04-08 23:32:59 | 2024-04-08 23:32:59 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2024-04-08 15:45:05 | 2024-04-08 16:00:10 |
Tags
win.sigloaderSample information
- Filenames
- SecuriteInfo.com.Win32.Evo-gen.20658.28793, QFI-APR-UPRRP24-04-02PRpdf.gzex66267821is66140321hm73c25feb07f209751bc514e7102070c74ad5f17cb04409e4e6d053619d3f635e
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 816880 bytes
- MD5
1b02afb379eaa68934e3ce9831fcaa3f- SHA-1
1d0a6b8cd901bd3a9e7d588dea06ed8cff3bfa97- SHA-256
eef5fc49ee15098dabcaccf8b6badbe5f507a7464eba9b8ce8c1dbe3f22fc82b- First indexed
- 2024-04-08 15:22:02
- Last updated
- 2026-10-10 16:16:44
Process list
| Name | Command line |
|---|---|
| QFI-APR-UPRRP24-04-02PRpdf.gzex66267821is66140321hm73c25feb07f209751bc514e7102070c74ad5f17cb04409e4e6d053619d3f635e.exe | |