General

  • Target

    a28fd758885394005a0420a25cbdf4b3b2de0839908c2854fd9a8b1a2d672a64

  • Size

    1.0MB

  • MD5

    930e7562f89df014ef1b057dd1fa4bde

  • SHA1

    62afddf1478753828c9910e5d1f1b565ab6761c7

  • SHA256

    a28fd758885394005a0420a25cbdf4b3b2de0839908c2854fd9a8b1a2d672a64

  • SHA512

    6c99d12963639c18398839d9bdb8133d12568c188d01b0e74c859e11d9cb0531352fac29fff437ea02cfc12cfa4ff6f780a013c68dfe373f40d3c936787acb6a

  • SSDEEP

    24576:kdJmFfqOqugtNDFQcLaBRyhhUF54clNf7/I:kqFyugzXho54cl

Score
10/10

Malware Config

Signatures

  • Detects Echelon Stealer payload 1 IoCs
  • Echelon family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a28fd758885394005a0420a25cbdf4b3b2de0839908c2854fd9a8b1a2d672a64
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections