General

  • Target

    790c0dc8e06b49f065a7247d814bb6aa

  • Size

    1.0MB

  • Sample

    240127-c1rclachal

  • MD5

    790c0dc8e06b49f065a7247d814bb6aa

  • SHA1

    97c48d3568cfe2592e5a75f91db1f89774ab3a73

  • SHA256

    02f71e98c5c48f61b12c633b5f4012b30fce5e80c165f3f9ee87738631c47ed2

  • SHA512

    e93cdc604f0c74613f1e7ea51e86b89bb5c0525d77535340e0617c4191288c728a5e69b578094e2bce69618fccaff030027c1001da1435929220534ce31a4889

  • SSDEEP

    24576:kfQYxUhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRto:lo54clgLH+tkWJ0N0

Score
10/10

Malware Config

Targets

    • Target

      790c0dc8e06b49f065a7247d814bb6aa

    • Size

      1.0MB

    • MD5

      790c0dc8e06b49f065a7247d814bb6aa

    • SHA1

      97c48d3568cfe2592e5a75f91db1f89774ab3a73

    • SHA256

      02f71e98c5c48f61b12c633b5f4012b30fce5e80c165f3f9ee87738631c47ed2

    • SHA512

      e93cdc604f0c74613f1e7ea51e86b89bb5c0525d77535340e0617c4191288c728a5e69b578094e2bce69618fccaff030027c1001da1435929220534ce31a4889

    • SSDEEP

      24576:kfQYxUhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRto:lo54clgLH+tkWJ0N0

    Score
    10/10
    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks