Overview

overview

10

Static

static

10

b9bd8fe0b3...2b.exe

windows7-x64

10

b9bd8fe0b3...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9bd8fe0b33b5937c740db9992833a7262d073d8cf3ec4c32901a57ed918b12b

  • Size

    653KB

  • Sample

    240122-bk6xnsdcbk

  • MD5

    2f24dee681ff1eb62a5d7b2698aaf5ca

  • SHA1

    e3d687669640208a6c1d3c2c1f5c80debdf392c6

  • SHA256

    b9bd8fe0b33b5937c740db9992833a7262d073d8cf3ec4c32901a57ed918b12b

  • SHA512

    20c3b334ee470613b3c5c53682720314ebc74bae74a1c5e2776ce39c23a0c81a7b71c296eccdd7663e1bae0d1a54c32b4e87bd6ee6a47b08f5d653d6641ebc84

  • SSDEEP

    12288:JT4on1TyxGQL32ikCaUS4csRBse6sfWiAA:JT42T7y3k94cunZeiB

Score
10/10
echelonspywarestealer

Malware Config

Targets

    • Target

      b9bd8fe0b33b5937c740db9992833a7262d073d8cf3ec4c32901a57ed918b12b

    • Size

      653KB

    • MD5

      2f24dee681ff1eb62a5d7b2698aaf5ca

    • SHA1

      e3d687669640208a6c1d3c2c1f5c80debdf392c6

    • SHA256

      b9bd8fe0b33b5937c740db9992833a7262d073d8cf3ec4c32901a57ed918b12b

    • SHA512

      20c3b334ee470613b3c5c53682720314ebc74bae74a1c5e2776ce39c23a0c81a7b71c296eccdd7663e1bae0d1a54c32b4e87bd6ee6a47b08f5d653d6641ebc84

    • SSDEEP

      12288:JT4on1TyxGQL32ikCaUS4csRBse6sfWiAA:JT42T7y3k94cunZeiB

    Score
    10/10
    echelonspywarestealer

    • Detects Echelon Stealer payload

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks