Overview

overview

10

Static

static

10

e98261eab9...d3.exe

windows7-x64

10

e98261eab9...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e98261eab9b28563f5cd7628b8c4760106ca8daa8b7270c62dea4280c4b533d3.exe

  • Size

    1.1MB

  • Sample

    241122-j18p7sxkas

  • MD5

    121d010b0670bad2b83f26494350bef8

  • SHA1

    8f1bdca7540f014b1eb7d1214a0e5cda15ec3060

  • SHA256

    e98261eab9b28563f5cd7628b8c4760106ca8daa8b7270c62dea4280c4b533d3

  • SHA512

    62f837e4c61e6295c7815d8c14d9dc097a60420193d3c4b3e139843b2a1232a9057d734ab9cedf027deb3f2fce6038ec1a973d6e78978782711c3ab97e956404

  • SSDEEP

    24576:pjE5JY4hhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRfEtp7IXF:Co54clgLH+tkWJ0NyzY

Score
10/10
echelondiscoveryspywarestealer

Malware Config

Targets

    • Target

      e98261eab9b28563f5cd7628b8c4760106ca8daa8b7270c62dea4280c4b533d3.exe

    • Size

      1.1MB

    • MD5

      121d010b0670bad2b83f26494350bef8

    • SHA1

      8f1bdca7540f014b1eb7d1214a0e5cda15ec3060

    • SHA256

      e98261eab9b28563f5cd7628b8c4760106ca8daa8b7270c62dea4280c4b533d3

    • SHA512

      62f837e4c61e6295c7815d8c14d9dc097a60420193d3c4b3e139843b2a1232a9057d734ab9cedf027deb3f2fce6038ec1a973d6e78978782711c3ab97e956404

    • SSDEEP

      24576:pjE5JY4hhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRfEtp7IXF:Co54clgLH+tkWJ0NyzY

    Score
    10/10
    echelonspywarestealerdiscovery

    • Detects Echelon Stealer payload

    • Echelon

      Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.

      stealerspywareechelon

    • Echelon family

      echelon

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks