Overview

overview

10

Static

static

10

fa268000fd...48.exe

windows7-x64

10

fa268000fd...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa268000fddf1a39ea54a8ce9dd79e16ef8f0d5346a31b4df6f0fa45e4118c48

  • Size

    659KB

  • Sample

    240122-bc995adaem

  • MD5

    71b753aeb5601a16b3fd2d6856e37c33

  • SHA1

    99d18d47b4b69b0be7d95e008392f0aa110cbf41

  • SHA256

    fa268000fddf1a39ea54a8ce9dd79e16ef8f0d5346a31b4df6f0fa45e4118c48

  • SHA512

    bc94f0c0fedc40f1266c1b5855510e4131a2b66fd5dad9256371e10ea83c6e9b9d6f2e2ae973ee1492b5bb3a3967b8cfee2b7a7146e8bf41ffe782321d6dc0a9

  • SSDEEP

    12288:tA03baVe7aXE5XQL32ikCaUS4csRBse6sfWTAA:tA03baVeu8Xy3k94cunZeTB

Score
10/10
echelonspywarestealer

Malware Config

Targets

    • Target

      fa268000fddf1a39ea54a8ce9dd79e16ef8f0d5346a31b4df6f0fa45e4118c48

    • Size

      659KB

    • MD5

      71b753aeb5601a16b3fd2d6856e37c33

    • SHA1

      99d18d47b4b69b0be7d95e008392f0aa110cbf41

    • SHA256

      fa268000fddf1a39ea54a8ce9dd79e16ef8f0d5346a31b4df6f0fa45e4118c48

    • SHA512

      bc94f0c0fedc40f1266c1b5855510e4131a2b66fd5dad9256371e10ea83c6e9b9d6f2e2ae973ee1492b5bb3a3967b8cfee2b7a7146e8bf41ffe782321d6dc0a9

    • SSDEEP

      12288:tA03baVe7aXE5XQL32ikCaUS4csRBse6sfWTAA:tA03baVeu8Xy3k94cunZeTB

    Score
    10/10
    echelonspywarestealer

    • Detects Echelon Stealer payload

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks