Overview

overview

10

Static

static

329dcb6dad...b3.exe

windows7-x64

6

329dcb6dad...b3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    329dcb6dad9f6417897aabee2c031e81d1e2fe054c0d30815af204405897dab3

  • Size

    682KB

  • Sample

    230129-v6xqnsff86

  • MD5

    b890b71fc8ae5c295de0727f811f01d9

  • SHA1

    aa8fcf80df7d8c5aaa7d6dc8180b7d83746a5230

  • SHA256

    329dcb6dad9f6417897aabee2c031e81d1e2fe054c0d30815af204405897dab3

  • SHA512

    60bdd8fc317fb2632a738c234ee1a0a7cad5140bffa16860a08247e69e3bbe9074b8a4b6dc32edf706a80717c3ad545d8a29dd25527856c81f2c75f1bbea7fd4

  • SSDEEP

    12288:Z2bYlne6BkD5Eg0u81mF8Z6nIiMQoYsS3jid3AbSc6OqImFaRWo:Z2bYlnrkL0fmNnIMtZE35hOgF

Score
10/10
echelonspywarestealer

Malware Config

Targets

    • Target

      329dcb6dad9f6417897aabee2c031e81d1e2fe054c0d30815af204405897dab3

    • Size

      682KB

    • MD5

      b890b71fc8ae5c295de0727f811f01d9

    • SHA1

      aa8fcf80df7d8c5aaa7d6dc8180b7d83746a5230

    • SHA256

      329dcb6dad9f6417897aabee2c031e81d1e2fe054c0d30815af204405897dab3

    • SHA512

      60bdd8fc317fb2632a738c234ee1a0a7cad5140bffa16860a08247e69e3bbe9074b8a4b6dc32edf706a80717c3ad545d8a29dd25527856c81f2c75f1bbea7fd4

    • SSDEEP

      12288:Z2bYlne6BkD5Eg0u81mF8Z6nIiMQoYsS3jid3AbSc6OqImFaRWo:Z2bYlnrkL0fmNnIMtZE35hOgF

    Score
    10/10
    echelonspywarestealer

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks