General

  • Target

    d06b6e0358b55b0bb54c3eade41b7d37

  • Size

    1.0MB

  • Sample

    240317-kg8rjaah3x

  • MD5

    d06b6e0358b55b0bb54c3eade41b7d37

  • SHA1

    acfe2ef8dcb349cebe2e94fa6cded01a9f8d9779

  • SHA256

    4e628ceb70e506731aa26a97e3c8073887c8c6fd21929d88edf84c82ef9eebce

  • SHA512

    4ee9646acb973cb1d4d2b67cf8a191f19a57e3852d8ae9214d563cf2cc91a06ec2c0a82354bf0009498da17cd8b2052ff97db2f8bdd95e5094995b5f962d0a18

  • SSDEEP

    24576:NfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+G:zo54clgLH+tkWJ0Nb

Score
10/10

Malware Config

Targets

    • Target

      d06b6e0358b55b0bb54c3eade41b7d37

    • Size

      1.0MB

    • MD5

      d06b6e0358b55b0bb54c3eade41b7d37

    • SHA1

      acfe2ef8dcb349cebe2e94fa6cded01a9f8d9779

    • SHA256

      4e628ceb70e506731aa26a97e3c8073887c8c6fd21929d88edf84c82ef9eebce

    • SHA512

      4ee9646acb973cb1d4d2b67cf8a191f19a57e3852d8ae9214d563cf2cc91a06ec2c0a82354bf0009498da17cd8b2052ff97db2f8bdd95e5094995b5f962d0a18

    • SSDEEP

      24576:NfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+G:zo54clgLH+tkWJ0Nb

    Score
    10/10
    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks