epsilon | 70aa928cfadf5216ee0edbfa44f34f55893eef92470924b2bd66892fd0fda9f8

General

Target
FueledupSetup_x64.exe
Size 62.1MB
Sample250307-rm6yfssky8
SHA256 70aa928cfadf5216ee0edbfa44f34f55893eef92470924b2bd66892fd0fda9f8
MD5 28e47e5a951138aa8c48fdb54e8829b0
SHA1 3030113d4fdae1f41b09e6c82379312aa29d6b1e
SHA512 47d2a5b7a23f8952fe9cd8755b635758fb77febfcd391f7b64eee59ca8ddfb43113c5019324c89098032e42f062f2333817ad14a2f1de67c0140e8924b89e37c
SSDEEP 1572864:4m60grSMFqsvutH7QjRyigjXaXiymm4QOGfp3HlagPz:b60grSO+H7Qyi21QOGx3HlagPz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  FueledupSetup_x64.exe
- Size 62.1MB
- SHA256 70aa928cfadf5216ee0edbfa44f34f55893eef92470924b2bd66892fd0fda9f8
- MD5 28e47e5a951138aa8c48fdb54e8829b0
- SHA1 3030113d4fdae1f41b09e6c82379312aa29d6b1e
- SHA512 47d2a5b7a23f8952fe9cd8755b635758fb77febfcd391f7b64eee59ca8ddfb43113c5019324c89098032e42f062f2333817ad14a2f1de67c0140e8924b89e37c
- SSDEEP 1572864:4m60grSMFqsvutH7QjRyigjXaXiymm4QOGfp3HlagPz:b60grSO+H7Qyi21QOGx3HlagPz
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

epsilon discovery persistence privilege_escalation spyware stealer
- Epsilon Stealer
  Information stealer.
  stealer epsilon
- Epsilon family
  epsilon
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  FueledupSetup_x64.exe
- Size 140.1MB
- SHA256 1eb0dd24fabf40d1ba39fd1521313dc045f02af52c0e2aca919f7fda22531538
- MD5 036c8f1bf656b45b69be32a3bfd06205
- SHA1 202723e7c6fcc533aa4021ffa65c758d3d16d95a
- SHA512 953974f262001d773144e53a896818ae1b6df933a9d422116f35b73431a2a35edd7d5d4e4b504b3e84303794e35fd61e111c95d7f72f4335afa9efe3d23b0e7d
- SSDEEP 1572864:o2Cm7gJKfVjsPawuFHNwczWTeMkF7ZEk8bCkKbj:PaodJFek8+k
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

epsilon discovery persistence privilege_escalation spyware stealer
- Epsilon Stealer
  Information stealer.
  stealer epsilon
- Epsilon family
  epsilon
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral3 behavioral4