Overview

overview

10

Static

static

10

d6ca1276e7...4c.exe

windows7-x64

10

d6ca1276e7...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6ca1276e7b7d3cb2b80c923344d224c

  • Size

    1.0MB

  • Sample

    240319-wvvydaag73

  • MD5

    d6ca1276e7b7d3cb2b80c923344d224c

  • SHA1

    aba6992aff5b194d04b003bfeeca7bb4ff7c94e3

  • SHA256

    c3a19079975435934b29b6240b39aea2c5695657cbec4d5e27d862edf1c61c7a

  • SHA512

    727ef205904c12df9b4b85323f54913f07fde65f4cd715ecdb6345ba65fd6be0b0b95e89759036f9a0c90ba4c17616c25707996f0aed93d57970c84b240056e5

  • SSDEEP

    24576:tjE5uYGhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRyE:1o54clgLH+tkWJ0N9

Score
10/10
echelonspywarestealer

Malware Config

Targets

    • Target

      d6ca1276e7b7d3cb2b80c923344d224c

    • Size

      1.0MB

    • MD5

      d6ca1276e7b7d3cb2b80c923344d224c

    • SHA1

      aba6992aff5b194d04b003bfeeca7bb4ff7c94e3

    • SHA256

      c3a19079975435934b29b6240b39aea2c5695657cbec4d5e27d862edf1c61c7a

    • SHA512

      727ef205904c12df9b4b85323f54913f07fde65f4cd715ecdb6345ba65fd6be0b0b95e89759036f9a0c90ba4c17616c25707996f0aed93d57970c84b240056e5

    • SSDEEP

      24576:tjE5uYGhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRyE:1o54clgLH+tkWJ0N9

    Score
    10/10
    echelonspywarestealer

    • Detects Echelon Stealer payload

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks