echelon | 6e7df11f016b14bd88995dcf0ebeb30ffc1d33b08ebbc0aa26476232f6bc9db3 | Triage

Sharing

General

Target

c75d07d3055f80498c650e6d9e1c6039
Size

1.0MB
Sample

240314-b4d11ahg25
MD5

c75d07d3055f80498c650e6d9e1c6039
SHA1

a29b57770ee0ae312ec0773765e1fceff5203104
SHA256

6e7df11f016b14bd88995dcf0ebeb30ffc1d33b08ebbc0aa26476232f6bc9db3
SHA512

b24c0a6b3101c22eefe1f8eb0ead444c3ba49d3bc8ec2ae95ef5d97be2c17986bd57bbf207e12163a37416332a2f253c59fa33b1229a14985fd844729ffa9af3
SSDEEP

24576:hfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+Gu:/o54clgLH+tkWJ0Nbu

Score

10^/10

echelon spyware stealer

Malware Config

Targets

- Target
  
  c75d07d3055f80498c650e6d9e1c6039
- Size
  
  1.0MB
- MD5
  
  c75d07d3055f80498c650e6d9e1c6039
- SHA1
  
  a29b57770ee0ae312ec0773765e1fceff5203104
- SHA256
  
  6e7df11f016b14bd88995dcf0ebeb30ffc1d33b08ebbc0aa26476232f6bc9db3
- SHA512
  
  b24c0a6b3101c22eefe1f8eb0ead444c3ba49d3bc8ec2ae95ef5d97be2c17986bd57bbf207e12163a37416332a2f253c59fa33b1229a14985fd844729ffa9af3
- SSDEEP
  
  24576:hfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+Gu:/o54clgLH+tkWJ0Nbu
Score

10^/10

echelon spyware stealer
- Echelon
  Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.
  stealer spyware echelon
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

echelonspywarestealer