General

  • Target

    42c949896f36865721df77cebebd9705.bin

  • Size

    339KB

  • MD5

    4748a2ba82d7978c1c5b82131bc38f39

  • SHA1

    a446ca3728add03317ab850542c6c7c64fc160e0

  • SHA256

    5c02b6ab9aa997caf55abe19e5123f5c7531ba58f3cb74ef01e18d278ff9aadd

  • SHA512

    0b9fd5c554e450550a16f26bc0669a7c8e1b9561c00c771ad28ed9b19153f3e1f7152767b0db45c6fa2bbabd94eb0562e0303bd5ee071b6b8fadd4788c476052

  • SSDEEP

    6144:X0ZL49nGuW6eqjr+1r9Ulpw1gcfa9y2YSX4PH64M/tHsRGi6ZaiGZnKtXMNH:Xus9nGrs+16lpwu6b3SUxiKio

Score
10/10

Malware Config

Signatures

  • Detects Echelon Stealer payload 1 IoCs
  • Echelon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42c949896f36865721df77cebebd9705.bin
    .zip

    Password: infected

  • f9f1b8511b6a2f81a35a80fff4880d38fa00c30b10ebb5aecccbfcfb1ff086af.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections