General

  • Target

    echo.7z

  • Size

    4.1MB

  • MD5

    01633b29d16082836741b9d536e5a79b

  • SHA1

    b8b35f65022a34c8a356719c7c4ae6c05a47a006

  • SHA256

    cb6f4937129a7bb2a1450198b036f35f7fbb7cfde3ea6402c5526a4c26caaa47

  • SHA512

    91b00b48211a39e2591648411423c486134d05688f0290c55c4e02d788ff0facf31c45fb8ce616cefb180e56841ae19b4ac5944d09322d9ffc0b889591553902

  • SSDEEP

    98304:KU6mfMJPpGyEiKNaxlSM9jFVRYt64R41A7uXFr:KU6ke4SKN+wM9xEA1uAV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

Files

  • echo.7z
    .7z
  • echo/EchoMirage.chm
    .chm
  • echo/EchoMirage.exe
    .exe windows:5 windows x64 arch:x64

    00487aa74c91a4dc86982f2621e35a8b


    Headers

    Imports

    Exports

    Sections

  • echo/EchoMirageHooks32.dll
    .dll windows:5 windows x86 arch:x86

    d366e396ccbec601ae4b65ac499b8bff


    Headers

    Imports

    Sections

  • echo/EchoMirageHooks64.dll
    .dll windows:5 windows x64 arch:x64

    26af301f7989ba106062d39730b88f65


    Headers

    Imports

    Sections

  • echo/EchoMirageUnelevated.exe
    .exe windows:5 windows x64 arch:x64

    7e3983ddd94510c54f769279fc03c4b1


    Headers

    Imports

    Sections

  • echo/License.txt
  • echo/unins000.dat
  • echo/unins000.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ollydbg/Lib/MFC42.Lib
  • ollydbg/Lib/mfc71.Lib
  • ollydbg/OLLYDBG 9in1.EXE
    .exe windows:4 windows x86 arch:x86

    601aae4d9b90819ecbda85f5864d7478


    Headers

    Imports

    Exports

    Sections

  • ollydbg/OLLYDBG.HLP
  • ollydbg/OLLYDBG.exe
    .exe windows:4 windows x86 arch:x86

    601aae4d9b90819ecbda85f5864d7478


    Headers

    Imports

    Exports

    Sections

  • ollydbg/RAMHELP.DLL
    .dll windows:5 windows x86 arch:x86

    515ee46e8930abe46e0569a1a18643ae


    Headers

    Imports

    Exports

    Sections

  • ollydbg/cw3230mt.dll
    .dll windows:1 windows x86 arch:x86

    6d6178dd454728ac71fabaaca3f58db6


    Headers

    Imports

    Exports

    Sections

  • ollydbg/ini/A.ini
  • ollydbg/ollydbg.ini
  • ollydbg/plugin/API_Break.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/plugin/HideDebugger.dll
    .dll windows:4 windows x86 arch:x86

    558e8575b92177e8d36a209ca3536ec9


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/HideDebugger.ini
  • ollydbg/plugin/NonaWrite.dll
    .dll windows:4 windows x86 arch:x86

    2d00b380b59ce2b14107701e803ee850


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/ODbgScript.dll
    .dll windows:4 windows x86 arch:x86

    4bdd368c341bf07492c1eb2d8cd5cb70


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/OllyDump.dll
    .dll windows:4 windows x86 arch:x86

    5a3ef0fd287f0ec4556b6cfd980bb4f8


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/OllyMoreMenu.dll
    .dll windows:4 windows x86 arch:x86

    9ba7bd6554e5f90c1b1f058b87342154


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/PhantOm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/plugin/PhantOm.txt
  • ollydbg/plugin/Poison.dll
    .dll windows:4 windows x86 arch:x86

    308548d53372ce06e4aaffea029adf02


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/ReadMeSO.txt
  • ollydbg/plugin/StrongOD.dll
    .dll windows:4 windows x86 arch:x86

    4f0b910e7c074e89fbec58bdf4953fba


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/analyzethis.dll
    .dll windows:4 windows x86 arch:x86

    956130e061c0bad0300f5a3b3d487781


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/bookmarks2.dll
    .dll windows:1 windows x86 arch:x86

    bb0ad052b1fc9c0b1915c24fb849dbfa


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/cmdbar.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/plugin/hidedbg.dll
    .dll windows:4 windows x86 arch:x86

    2141d75527eccaabca6b24c263555ad6


    Headers

    Imports

    Exports

    Sections

  • ollydbg/plugin/ollyadvanced (v1.25, outdated).chm
    .chm
  • ollydbg/plugin/readme.txt
  • ollydbg/plugin/ustrref.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/readme RAMODBG.txt
  • ollypack/OBSIDIUM 1.061 VB ONLY [loveboom].txt
  • ollypack/OBSIDIUM 1.1.1.4.txt
  • ollypack/Obsidium 1.061 OEP Finder v0.1 (for VB only).txt
  • ollypack/Obsidium 1.1.1.4 Unpack (not for VB).txt
  • ollypack/Obsidium 1.2.5.0 Fix IAT.txt
  • ollypack/Obsidium 1.2.5.0 OEP Finder.txt
  • ollypack/Obsidium 1.3.0.x OEP Finder + Find Stolen Code + Fix IAT .txt
    .js
  • ollypack/Obsidium 1.3.4.2 IAT Repair.txt
  • ollypack/Obsidium 1.3.4.2 OEP Finder (Virtual Protect).txt
  • ollypack/Obsidium 1.3.4.2 OEP Finder.txt
  • ollypack/Obsidium 1.3.x.x Unpacking Script.txt
  • ollypack/Obsidium 1.4.x.x OEP Finder + IAT Repair v0.2.txt
  • ollypack/Obsidium114.txt