Overview

overview

10

Static

static

3

true.exe

windows10-2004-x64

10

true.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    true.zip

  • Size

    72.3MB

  • Sample

    240224-y2a8nade46

  • MD5

    11c4e1549bc7ca56b8887c493e4fdff4

  • SHA1

    289cd96de504fa4ae202e110846b250ca4b31e18

  • SHA256

    673f039b5dd9b73ba098106700f324474cc25dbdbf7e90c1362eefc12c58b424

  • SHA512

    9c1adfd946b0938e3976ca0651af3c5195a1abf966c8b86b97dd3fa74243f07ae44b79790c2f8876e6f729c03f182d17c0cc122aa3129e88b198e2ce3c1fe56a

  • SSDEEP

    1572864:oyg/pp5BsF0ye0EX76e4Ijcj8/d6hT82wnmUizwPMK3vHnzwPwAYNztMG4:256F7efAAl6+27U2GN3UoAYNziG4

Score
10/10
epsilonspywarestealer

Malware Config

Targets

    • Target

      true.exe

    • Size

      72.3MB

    • MD5

      926f12fbd49f31898cb57691c8e5440f

    • SHA1

      cb398d75d40121ede9f93d60485d3d298d8ebe8a

    • SHA256

      15780db6b46529372c5055fa5ce972c5bfed2733b2702a0139adb26972f2699d

    • SHA512

      95cb1a0924966e55d92af69436a5a6e14b6358e13abc91dae08933eb0e4223cdc2c2c2a69c7b54290130bb01dea08a86366c3909da418d343ca5d3703ebcfe91

    • SSDEEP

      1572864:8ejOS30sMTRRi6EUSECPScDYpeBwBjURq7ne6w5KpN:8jsEHEDDSnlX7nBlpN

    Score
    10/10
    epsilonspywarestealer

    • Epsilon Stealer

      Information stealer.

      stealerepsilon

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks