Overview

overview

7

Static

static

7

echo.7z

windows10-2004-x64

7

Resubmissions

21-05-2024 15:59

240521-tfcgdabb36 7

21-05-2024 15:51

240521-takwkaba8w 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    echo.7z

  • Size

    17.3MB

  • MD5

    e0499900323a2a13e715c79df240c8cc

  • SHA1

    aab068f2af116efa533c46e42424f16f3eef90b6

  • SHA256

    4b246be91cb37f662827dbfb616b3a0cea66c9ee8db0eeff3808bf057b2b4738

  • SHA512

    f3b2d599431082f4a0591888ba12ccbf9dd518da64004092ee8dbe8fbff75fadee119694b766dff8cfcebb722600b46b950134304ead0d05069ad588a82d0cfb

  • SSDEEP

    393216:URxIrNnI6f7uzW4RyQZecNoTyBNoQKwKhGM4/kOh3Kv:qI6qqzW4RyncN2wNRKoM4de

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • echo.7z
    .7z
  • 1058352281.exe
    .exe windows:4 windows x86 arch:x86

    41aa9a1f4bf6f9462a4e644e00d744cd


    Headers

    Imports

    Sections

  • echo/EchoMirage.chm
    .chm
  • echo/EchoMirage.exe
    .exe windows:5 windows x64 arch:x64

    00487aa74c91a4dc86982f2621e35a8b


    Headers

    Imports

    Exports

    Sections

  • echo/EchoMirageHooks32.dll
    .dll windows:5 windows x86 arch:x86

    d366e396ccbec601ae4b65ac499b8bff


    Headers

    Imports

    Sections

  • echo/EchoMirageHooks64.dll
    .dll windows:5 windows x64 arch:x64

    26af301f7989ba106062d39730b88f65


    Headers

    Imports

    Sections

  • echo/EchoMirageUnelevated.exe
    .exe windows:5 windows x64 arch:x64

    7e3983ddd94510c54f769279fc03c4b1


    Headers

    Imports

    Sections

  • echo/License.txt
  • echo/unins000.dat
  • echo/unins000.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ollydbg/OllyDbg.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/OllyDbg.hlp
  • ollydbg/OllyPath.dll
    .dll windows:4 windows x86 arch:x86

    cf629ac1f9b4db24ba83bced5269379f


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Patches/OllyPath_mod.rar
    .rar
  • OllyPath.cbp
    .xml
  • bin/OllyPath.dll
    .dll windows:4 windows x86 arch:x86

    cf629ac1f9b4db24ba83bced5269379f


    Headers

    Imports

    Exports

    Sections

  • main.cpp
  • main.h
  • ollydbg/Patches/patches.txt
  • ollydbg/Patches/plugin_patches.txt
  • ollydbg/Patches/replace_icons.rar
    .rar
  • BITMAP/APPEAR.bmp
  • BITMAP/BREAKS.bmp
  • BITMAP/CLOSE.bmp
  • BITMAP/CPU.bmp
  • BITMAP/GOTO.bmp
  • BITMAP/HANDLES.bmp
  • BITMAP/HELP.bmp
  • BITMAP/LOG.bmp
  • BITMAP/MEMORY.bmp
  • BITMAP/MODULES.bmp
  • BITMAP/OPEN.bmp
  • BITMAP/OPTIONS.bmp
  • BITMAP/PATCHES.bmp
  • BITMAP/PAUSE.bmp
  • BITMAP/REFERS.bmp
  • BITMAP/RESTART.bmp
  • BITMAP/RUN.bmp
  • BITMAP/SOURCE.bmp
  • BITMAP/STACK.bmp
  • BITMAP/STEPIN.bmp
  • BITMAP/STEPOVER.bmp
  • BITMAP/THREADS.bmp
  • BITMAP/TILLRET.bmp
  • BITMAP/TRACE.bmp
  • BITMAP/TRIN.bmp
  • BITMAP/TROVER.bmp
  • BITMAP/WINDOWS.bmp
  • ICON_ENTRY/10.ico
  • ICON_ENTRY/11.ico
  • ICON_ENTRY/12.ico
  • ICON_ENTRY/13.ico
  • ICON_ENTRY/14.ico
  • ICON_ENTRY/15.ico
  • ICON_ENTRY/16.ico
  • ICON_ENTRY/17.ico
  • ICON_ENTRY/18.ico
  • ICON_ENTRY/19.ico
  • ICON_ENTRY/20.ico
  • ICON_ENTRY/21.ico
  • ICON_ENTRY/22.ico
  • ICON_ENTRY/23.ico
  • ICON_ENTRY/24.ico
  • ICON_ENTRY/3.ico
  • ICON_ENTRY/4.ico
  • ICON_ENTRY/5.ico
  • ICON_ENTRY/6.ico
  • ICON_ENTRY/7.ico
  • ICON_ENTRY/8.ico
  • ICON_ENTRY/9.ico
  • ollydbg/Plugins/Asm2Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    e61f2f894125bb9afbf614ac34b38d66


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/BYTES.OEP
  • ollydbg/Plugins/ClearUDD.dll
    .dll windows:4 windows x86 arch:x86

    71f56675c7d53187466580a02b7dbac8


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/CmdBar.dll
    .dll windows:4 windows x86 arch:x86

    740c796cfe9487e35921d7ec5aad2eb7


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/CmdBar.ini
  • ollydbg/Plugins/DataRipper.dll
    .dll windows:4 windows x86 arch:x86

    2d429d7c8db97ba30fcda6b5923d28c0


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/HiddenThreads.dll
    .dll windows:4 windows x86 arch:x86

    fdc6cfbe54d6146201c4e82915b9fe6c


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ICanAttach2.dll
    .dll windows:4 windows x86 arch:x86

    538e5ff3792b43ef5760ef69b48a08d9


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/MnemonicHelp.dll
    .dll windows:5 windows x86 arch:x86

    8916a878f46c8ed1ce079322140be7e2


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ModuleBCL.dll
    .dll windows:5 windows x86 arch:x86

    1878dc81f51673807650130c4df2a97d


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ODBJscript.chm
    .chm
  • ollydbg/Plugins/ODBJscript.dll
    .dll windows:5 windows x86 arch:x86

    b2ba925dcc01a3b446c80b49b70db66d


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ODbgScript.chm
    .chm
  • ollydbg/Plugins/ODbgScript.dll
    .dll windows:5 windows x86 arch:x86

    9dc65eadff077816f7e7fca07fceda80


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ODbgScript.txt
    .js
  • ollydbg/Plugins/OllyCopy.dll
    .dll windows:5 windows x86 arch:x86

    e677f079ced7565adfb8787cea524604


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/OllyFlow.dll
    .dll windows:4 windows x86 arch:x86

    506afa0cf48ee2fe0ef045543f83b1ca


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/OllyFlow.ini
  • ollydbg/Plugins/OllyWow64_0.2.dll
    .dll windows:4 windows x86 arch:x86

    1d254aa36703c1c16d4c10056b9be62a


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/RemoveCriticality.dll
    .dll windows:4 windows x86 arch:x86

    bcff1c10d7554700edf51ff5bd2d4e6d


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/SehSpy.dll
    .dll windows:4 windows x86 arch:x86

    5174b6384cee56822c87f9a7b6e907b2


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/SigMaker.dll
    .dll windows:5 windows x86 arch:x86

    49d3ab3032ba61265825996cdb83ac8c


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/StollyStruct.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/Plugins/StrongOD.dll
    .dll windows:5 windows x86 arch:x86

    4f46924c60bdf59293c42b8f6fa50dd9


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/TLSCatch.dll
    .dll windows:4 windows x86 arch:x86

    b6e2a6cc8bbb3d1f057799a715ded087


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/X_CRYPTO.dll
    .dll windows:4 windows x86 arch:x86

    ed0bfc41a1451e7cb0633c9f9808272a


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/analyzeThis.dll
    .dll windows:4 windows x86 arch:x86

    d6bab4d05b422a00b330bc99e484138f


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ida_sigs.dll
    .dll windows:4 windows x86 arch:x86

    eab28f219972a2cb39654c24603af1d1


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/ida_sigs.ini
  • ollydbg/Plugins/idaficator.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ollydbg/Plugins/multiasm.chm
    .chm
  • ollydbg/Plugins/multiasm_odbg.dll
    .dll windows:5 windows x86 arch:x86

    8500dad885776caa8c0e2656758c2d7b


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Plugins/oDump.dll
    .dll windows:4 windows x86 arch:x86

    f9a1512dd7dd1f70139d21e0e5ad2c96


    Headers

    Imports

    Exports

    Sections

  • ollydbg/Readme.txt
  • ollydbg/StollyStructs.ini
  • ollydbg/dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    e246e1939eedffac25310343ba57d266


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ollydbg/dumpsig.exe
    .exe windows:4 windows x86 arch:x86

    8bf34dcdfa93f98f3177dcd2182f65fe


    Headers

    Imports

    Exports

    Sections

  • ollydbg/ico/BUT_IMG_COSTUM1.bmp
  • ollydbg/ico/BUT_IMG_COSTUM2.bmp
  • ollydbg/ico/BUT_IMG_COSTUM3.bmp
  • ollydbg/ico/BUT_IMG_COSTUM4.bmp
  • ollydbg/ico/BUT_IMG_COSTUM5.bmp
  • ollydbg/known_bugs.txt
  • ollydbg/loaddll.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ollydbg/ollydbg.ini
  • ollydbg/ollydbg.js
    .js
  • ollydbg/win32.hlp
  • ollydbg/wingraph32.exe
    .exe windows:4 windows x86 arch:x86

    bb0acc175445092f0866df67c282ef0a


    Headers

    Imports

    Exports

    Sections

  • ollydbg/x86eas.hlp
    .js
  • ollypack/OBSIDIUM 1.061 VB ONLY [loveboom].txt
  • ollypack/OBSIDIUM 1.1.1.4.txt
  • ollypack/Obsidium 1.061 OEP Finder v0.1 (for VB only).txt
  • ollypack/Obsidium 1.1.1.4 Unpack (not for VB).txt
  • ollypack/Obsidium 1.2.5.0 Fix IAT.txt
  • ollypack/Obsidium 1.2.5.0 OEP Finder.txt
  • ollypack/Obsidium 1.3.0.x OEP Finder + Find Stolen Code + Fix IAT .txt
    .js
  • ollypack/Obsidium 1.3.4.2 IAT Repair.txt
  • ollypack/Obsidium 1.3.4.2 OEP Finder (Virtual Protect).txt
  • ollypack/Obsidium 1.3.4.2 OEP Finder.txt
  • ollypack/Obsidium 1.3.x.x Unpacking Script.txt
  • ollypack/Obsidium 1.4.x.x OEP Finder + IAT Repair v0.2.txt
  • ollypack/Obsidium114.txt