Overview

overview

10

Static

static

3

EpsilonStealer.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EpsilonStealer.zip

  • Size

    368.4MB

  • Sample

    231120-29gxysbd9v

  • MD5

    ec1ee9e669c249c3b69b1c98f82f1c2f

  • SHA1

    50c4f2b520a00ea22c6de761ca2be6a162cb0d91

  • SHA256

    de2f2978131455a7118669a794dafe94c84ecaee544663912c93ed8fe9c0d64b

  • SHA512

    0e977a8b0ae7919b2dab4af424bb188bbf4d6c5de8c0d96932bdbade70449441e57c6737994dff3986de4c079df5aede6094db0b9c3a03aef937057f44e24e40

  • SSDEEP

    6291456:N6SdofE5WlE9ZsTnYQ7DPBsS9BO3kUPsxguaViYPEMcXtNbY0dhO1ODPBsS9BO3G:NfdofE519ZsTnYiD5I3LAguabPLczbYo

Score
10/10
epsilonspywarestealer

Malware Config

Targets

    • Target

      EpsilonStealer.zip

    • Size

      368.4MB

    • MD5

      ec1ee9e669c249c3b69b1c98f82f1c2f

    • SHA1

      50c4f2b520a00ea22c6de761ca2be6a162cb0d91

    • SHA256

      de2f2978131455a7118669a794dafe94c84ecaee544663912c93ed8fe9c0d64b

    • SHA512

      0e977a8b0ae7919b2dab4af424bb188bbf4d6c5de8c0d96932bdbade70449441e57c6737994dff3986de4c079df5aede6094db0b9c3a03aef937057f44e24e40

    • SSDEEP

      6291456:N6SdofE5WlE9ZsTnYQ7DPBsS9BO3kUPsxguaViYPEMcXtNbY0dhO1ODPBsS9BO3G:NfdofE519ZsTnYiD5I3LAguabPLczbYo

    Score
    10/10
    epsilonspywarestealer

    • Detects EpsilonStealer ASAR

    • Epsilon Stealer

      Information stealer.

      stealerepsilon

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks