echelon | dc2b7679fe1950b3fd5d72668e957484b24c169dadc0ddbe69334e748ae197a6 | Triage

Sharing

General

Target

e27602f250feafb8c2dc9a04e5ba2137
Size

1.0MB
Sample

231222-s97zpsbhgn
MD5

e27602f250feafb8c2dc9a04e5ba2137
SHA1

67250b69ab12c0f539fe4c7f2a0ec7f30cce50b6
SHA256

dc2b7679fe1950b3fd5d72668e957484b24c169dadc0ddbe69334e748ae197a6
SHA512

962d5e64905693379b9ef128657d15815fae31b3743639d411c09162251ed28ec685edcebb6ebe099dc7469b068e4827b44de25de99b29478c564eda94aaba09
SSDEEP

24576:afQY6fhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRPIM:bo54clgLH+tkWJ0N5

Score

10^/10

echelon spyware stealer

Malware Config

Targets

- Target
  
  e27602f250feafb8c2dc9a04e5ba2137
- Size
  
  1.0MB
- MD5
  
  e27602f250feafb8c2dc9a04e5ba2137
- SHA1
  
  67250b69ab12c0f539fe4c7f2a0ec7f30cce50b6
- SHA256
  
  dc2b7679fe1950b3fd5d72668e957484b24c169dadc0ddbe69334e748ae197a6
- SHA512
  
  962d5e64905693379b9ef128657d15815fae31b3743639d411c09162251ed28ec685edcebb6ebe099dc7469b068e4827b44de25de99b29478c564eda94aaba09
- SSDEEP
  
  24576:afQY6fhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRPIM:bo54clgLH+tkWJ0N5
Score

10^/10

echelon spyware stealer
- Echelon
  Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.
  stealer spyware echelon
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

echelonspywarestealer