echelon | 02f71e98c5c48f61b12c633b5f4012b30fce5e80c165f3f9ee87738631c47ed2 | Triage

Sharing

General

Target

790c0dc8e06b49f065a7247d814bb6aa
Size

1.0MB
Sample

231226-sxtasaedh3
MD5

790c0dc8e06b49f065a7247d814bb6aa
SHA1

97c48d3568cfe2592e5a75f91db1f89774ab3a73
SHA256

02f71e98c5c48f61b12c633b5f4012b30fce5e80c165f3f9ee87738631c47ed2
SHA512

e93cdc604f0c74613f1e7ea51e86b89bb5c0525d77535340e0617c4191288c728a5e69b578094e2bce69618fccaff030027c1001da1435929220534ce31a4889
SSDEEP

24576:kfQYxUhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRto:lo54clgLH+tkWJ0N0

Score

10^/10

echelon spyware stealer

Malware Config

Targets

- Target
  
  790c0dc8e06b49f065a7247d814bb6aa
- Size
  
  1.0MB
- MD5
  
  790c0dc8e06b49f065a7247d814bb6aa
- SHA1
  
  97c48d3568cfe2592e5a75f91db1f89774ab3a73
- SHA256
  
  02f71e98c5c48f61b12c633b5f4012b30fce5e80c165f3f9ee87738631c47ed2
- SHA512
  
  e93cdc604f0c74613f1e7ea51e86b89bb5c0525d77535340e0617c4191288c728a5e69b578094e2bce69618fccaff030027c1001da1435929220534ce31a4889
- SSDEEP
  
  24576:kfQYxUhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRto:lo54clgLH+tkWJ0N0
Score

10^/10

echelon spyware stealer
- Echelon
  Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.
  stealer spyware echelon
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

echelonspywarestealer