General

  • Target

    echo.7z

  • Size

    11.4MB

  • MD5

    4818accedc08bbb6f350a96a7dc11871

  • SHA1

    96b90dd9099b689127c5c965eb1518acbef9bf9e

  • SHA256

    a00dc4b646318db993937ca9006bf9bcd361947ce53946b8b308c14c06c2bbe9

  • SHA512

    19548b09f6b58cbc2913eb35187dacb8b216f057fcd2359a06a98d73a2fd4f9d3b64a8b6cc6cc24f8fe5f22b0c32c93def611882f723a8db4043e044105cb285

  • SSDEEP

    196608:3U6ke4SKN+wM9xEA1uA3eCnyBNSz6vBaVXBqK4s0/lrCpFrhGM4kuSb0n:3ULecNJKTyBNoQKwKhGM4/D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • echo.7z
    .7z
  • 1058352281.exe
    .exe windows:4 windows x86 arch:x86

    41aa9a1f4bf6f9462a4e644e00d744cd


    Headers

    Imports

    Sections

  • echo/EchoMirage.chm
    .chm
  • echo/EchoMirage.exe
    .exe windows:5 windows x64 arch:x64

    00487aa74c91a4dc86982f2621e35a8b


    Headers

    Imports

    Exports

    Sections

  • echo/EchoMirageHooks32.dll
    .dll windows:5 windows x86 arch:x86

    d366e396ccbec601ae4b65ac499b8bff


    Headers

    Imports

    Sections

  • echo/EchoMirageHooks64.dll
    .dll windows:5 windows x64 arch:x64

    26af301f7989ba106062d39730b88f65


    Headers

    Imports

    Sections

  • echo/EchoMirageUnelevated.exe
    .exe windows:5 windows x64 arch:x64

    7e3983ddd94510c54f769279fc03c4b1


    Headers

    Imports

    Sections

  • echo/License.txt
  • echo/unins000.dat
  • echo/unins000.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ollydbg/Lib/MFC42.Lib
  • ollydbg/Lib/mfc71.Lib
  • ollydbg/OLLYDBG 9in1.EXE
    .exe windows:4 windows x86 arch:x86

    601aae4d9b90819ecbda85f5864d7478


    Headers

    Imports

    Exports

    Sections

  • ollydbg/OLLYDBG.HLP
  • ollydbg/OLLYDBG.exe
    .exe windows:4 windows x86 arch:x86

    601aae4d9b90819ecbda85f5864d7478


    Headers

    Imports

    Exports

    Sections

  • ollydbg/RAMHELP.DLL
    .dll windows:5 windows x86 arch:x86

    515ee46e8930abe46e0569a1a18643ae


    Headers

    Imports

    Exports

    Sections

  • ollydbg/cw3230mt.dll
    .dll windows:1 windows x86 arch:x86

    6d6178dd454728ac71fabaaca3f58db6


    Headers

    Imports

    Exports

    Sections

  • ollydbg/ini/A.ini
  • ollydbg/ollydbg.ini
  • ollydbg/plugin/API_Break.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/plugin/HideDebugger.dll
    .dll windows:4 windows x86 arch:x86

    558e8575b92177e8d36a209ca3536ec9


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/HideDebugger.ini
  • ollydbg/plugin/NonaWrite.dll
    .dll windows:4 windows x86 arch:x86

    2d00b380b59ce2b14107701e803ee850


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/ODbgScript.dll
    .dll windows:4 windows x86 arch:x86

    4bdd368c341bf07492c1eb2d8cd5cb70


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/OllyDump.dll
    .dll windows:4 windows x86 arch:x86

    5a3ef0fd287f0ec4556b6cfd980bb4f8


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/OllyMoreMenu.dll
    .dll windows:4 windows x86 arch:x86

    9ba7bd6554e5f90c1b1f058b87342154


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/PhantOm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/plugin/PhantOm.txt
  • ollydbg/plugin/Poison.dll
    .dll windows:4 windows x86 arch:x86

    308548d53372ce06e4aaffea029adf02


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/ReadMeSO.txt
  • ollydbg/plugin/StrongOD.dll
    .dll windows:4 windows x86 arch:x86

    4f0b910e7c074e89fbec58bdf4953fba


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/analyzethis.dll
    .dll windows:4 windows x86 arch:x86

    956130e061c0bad0300f5a3b3d487781


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/bookmarks2.dll
    .dll windows:1 windows x86 arch:x86

    bb0ad052b1fc9c0b1915c24fb849dbfa


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/cmdbar.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/plugin/hidedbg.dll
    .dll windows:4 windows x86 arch:x86

    2141d75527eccaabca6b24c263555ad6


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/ollyadvanced (v1.25, outdated).chm
    .chm
  • ollydbg/plugin/readme.txt
  • ollydbg/plugin/ustrref.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/readme RAMODBG.txt
  • ollypack/OBSIDIUM 1.061 VB ONLY [loveboom].txt
  • ollypack/OBSIDIUM 1.1.1.4.txt
  • ollypack/Obsidium 1.061 OEP Finder v0.1 (for VB only).txt
  • ollypack/Obsidium 1.1.1.4 Unpack (not for VB).txt
  • ollypack/Obsidium 1.2.5.0 Fix IAT.txt
  • ollypack/Obsidium 1.2.5.0 OEP Finder.txt
  • ollypack/Obsidium 1.3.0.x OEP Finder + Find Stolen Code + Fix IAT .txt
    .js
  • ollypack/Obsidium 1.3.4.2 IAT Repair.txt
  • ollypack/Obsidium 1.3.4.2 OEP Finder (Virtual Protect).txt
  • ollypack/Obsidium 1.3.4.2 OEP Finder.txt
  • ollypack/Obsidium 1.3.x.x Unpacking Script.txt
  • ollypack/Obsidium 1.4.x.x OEP Finder + IAT Repair v0.2.txt
  • ollypack/Obsidium114.txt