echelon | 4e628ceb70e506731aa26a97e3c8073887c8c6fd21929d88edf84c82ef9eebce | Triage

Sharing

General

Target

d06b6e0358b55b0bb54c3eade41b7d37
Size

1.0MB
Sample

240317-kg8rjaah3x
MD5

d06b6e0358b55b0bb54c3eade41b7d37
SHA1

acfe2ef8dcb349cebe2e94fa6cded01a9f8d9779
SHA256

4e628ceb70e506731aa26a97e3c8073887c8c6fd21929d88edf84c82ef9eebce
SHA512

4ee9646acb973cb1d4d2b67cf8a191f19a57e3852d8ae9214d563cf2cc91a06ec2c0a82354bf0009498da17cd8b2052ff97db2f8bdd95e5094995b5f962d0a18
SSDEEP

24576:NfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+G:zo54clgLH+tkWJ0Nb

Score

10^/10

echelon spyware stealer

Malware Config

Targets

- Target
  
  d06b6e0358b55b0bb54c3eade41b7d37
- Size
  
  1.0MB
- MD5
  
  d06b6e0358b55b0bb54c3eade41b7d37
- SHA1
  
  acfe2ef8dcb349cebe2e94fa6cded01a9f8d9779
- SHA256
  
  4e628ceb70e506731aa26a97e3c8073887c8c6fd21929d88edf84c82ef9eebce
- SHA512
  
  4ee9646acb973cb1d4d2b67cf8a191f19a57e3852d8ae9214d563cf2cc91a06ec2c0a82354bf0009498da17cd8b2052ff97db2f8bdd95e5094995b5f962d0a18
- SSDEEP
  
  24576:NfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+G:zo54clgLH+tkWJ0Nb
Score

10^/10

echelon spyware stealer
- Echelon
  Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.
  stealer spyware echelon
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

echelonspywarestealer