Overview

overview

10

Static

static

10

62b0221391...55.exe

windows7-x64

10

62b0221391...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62b0221391c3a3b97dc587329b5ecf17e4435515026072f2419503ceefc2a455

  • Size

    780KB

  • Sample

    231226-bp1w8abeg5

  • MD5

    d8cb800bdea9202ffcfe01bfcbf3f8da

  • SHA1

    0c643c77649b59ddd141d9fa02724b1408d8ca28

  • SHA256

    62b0221391c3a3b97dc587329b5ecf17e4435515026072f2419503ceefc2a455

  • SHA512

    4eb5c8c6f3995d9311a39886a6f40b32074b45a0bd8b200b0dd047dc5d53d39e28dddf336cdffa2f5780097d0d28f5e0c0d8fcd68228755b840d95a2badbfbe9

  • SSDEEP

    12288:9uReJkcXyjgJ7Isn1wA6BBkeDTONbIcAA:seKcnJ7IgwA6DCNbzB

Score
10/10
echelonspywarestealer

Malware Config

Targets

    • Target

      62b0221391c3a3b97dc587329b5ecf17e4435515026072f2419503ceefc2a455

    • Size

      780KB

    • MD5

      d8cb800bdea9202ffcfe01bfcbf3f8da

    • SHA1

      0c643c77649b59ddd141d9fa02724b1408d8ca28

    • SHA256

      62b0221391c3a3b97dc587329b5ecf17e4435515026072f2419503ceefc2a455

    • SHA512

      4eb5c8c6f3995d9311a39886a6f40b32074b45a0bd8b200b0dd047dc5d53d39e28dddf336cdffa2f5780097d0d28f5e0c0d8fcd68228755b840d95a2badbfbe9

    • SSDEEP

      12288:9uReJkcXyjgJ7Isn1wA6BBkeDTONbIcAA:seKcnJ7IgwA6DCNbzB

    Score
    10/10
    echelonspywarestealer

    • Detects Echelon Stealer payload

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks