Overview

overview

10

Static

static

10

559352e3fc...ff.exe

windows7-x64

10

559352e3fc...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    559352e3fce2411d57970e4376f4e6e987ff8632b3f132a229cedbbebabd02ff

  • Size

    659KB

  • Sample

    240122-bfhdhsdbam

  • MD5

    bd96a846220050b86645baf604f0d55f

  • SHA1

    994293b8fed3bc6252be130bb6062078e2a43a1b

  • SHA256

    559352e3fce2411d57970e4376f4e6e987ff8632b3f132a229cedbbebabd02ff

  • SHA512

    2c673ede537c16aed303fc9a290656691fc46ce6b955675b4045a913ba14e37d37ee5bb8b284fd43cb366b396ad9ad496b302b13cdd43968a2eb0002a629a911

  • SSDEEP

    12288:2A03baYRBhlrf6QL32ikCaUS4csRBse6sfWpAA:2A03baY3hh6y3k94cunZepB

Score
10/10
echelonspywarestealer

Malware Config

Targets

    • Target

      559352e3fce2411d57970e4376f4e6e987ff8632b3f132a229cedbbebabd02ff

    • Size

      659KB

    • MD5

      bd96a846220050b86645baf604f0d55f

    • SHA1

      994293b8fed3bc6252be130bb6062078e2a43a1b

    • SHA256

      559352e3fce2411d57970e4376f4e6e987ff8632b3f132a229cedbbebabd02ff

    • SHA512

      2c673ede537c16aed303fc9a290656691fc46ce6b955675b4045a913ba14e37d37ee5bb8b284fd43cb366b396ad9ad496b302b13cdd43968a2eb0002a629a911

    • SSDEEP

      12288:2A03baYRBhlrf6QL32ikCaUS4csRBse6sfWpAA:2A03baY3hh6y3k94cunZepB

    Score
    10/10
    echelonspywarestealer

    • Detects Echelon Stealer payload

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks