Overview

overview

3

Static

static

3

audioplaye...in.dll

windows10-2004-x64

1

audioplaye...in.dll

windows11-ltsc_2024-x64

1

data/app.so

ubuntu-18.04-amd64

1

data/flutt...DB.dll

windows10-2004-x64

1

data/flutt...DB.dll

windows11-ltsc_2024-x64

1

data/flutt...pi.dll

windows10-2004-x64

1

data/flutt...pi.dll

windows11-ltsc_2024-x64

1

data/flutt...ey.dll

windows10-2004-x64

1

data/flutt...ey.dll

windows11-ltsc_2024-x64

1

data/flutt...er.exe

windows10-2004-x64

3

data/flutt...er.exe

windows11-ltsc_2024-x64

3

data/flutt...t.djvu

windows10-2004-x64

3

data/flutt...t.djvu

windows11-ltsc_2024-x64

3

echotrace.exe

windows10-2004-x64

1

echotrace.exe

windows11-ltsc_2024-x64

1

file_saver_plugin.dll

windows10-2004-x64

1

file_saver_plugin.dll

windows11-ltsc_2024-x64

1

flutter_windows.dll

windows10-2004-x64

1

flutter_windows.dll

windows11-ltsc_2024-x64

1

go_decrypt.dll

windows10-2004-x64

1

go_decrypt.dll

windows11-ltsc_2024-x64

1

mp3lame.dll

windows10-2004-x64

1

mp3lame.dll

windows11-ltsc_2024-x64

1

sqlite3.x6...ws.dll

windows10-2004-x64

1

sqlite3.x6...ws.dll

windows11-ltsc_2024-x64

1

url_launch...in.dll

windows10-2004-x64

1

url_launch...in.dll

windows11-ltsc_2024-x64

1

zstd.dll

windows10-2004-x64

1

zstd.dll

windows11-ltsc_2024-x64

1

zstd_native.dll

windows10-2004-x64

1

zstd_native.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    echotrace-windows-v3.0.8.zip
  • Size 63.7MB
  • Sample261029-wez76adv3x
  • SHA256 99d523644e7044feb6b3e70b61c75eec2b3a1d77ee30b740e85b1ec4f4531f86
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discoveryexecutionlinux

Malware Config

Targets

    • Target
      audioplayers_windows_plugin.dll
    • Size 192KB
    • SHA256 7c0faac76d532c0aa05c3a404bd8c85736c70767c06f7d95a5921798c9958f46
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      data/app.so
    • Size 10.3MB
    • SHA256 01942ae9e8c4e159560c2e91bc41c1018a2d77236c22cf0f67a1569a132cd2ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3
    • Target
      data/flutter_assets/assets/dll/WCDB.dll
    • Size 9.2MB
    • SHA256 de80dc7b9117076f7f77e5ab5d6ee8dc44f8d3829c10549a800af2e4e219ebf8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4behavioral5
    • Target
      data/flutter_assets/assets/dll/wcdb_api.dll
    • Size 246KB
    • SHA256 47051ea23238845ee5df1326682f0f17fbd16f18a7f47585dabd360568c7b222
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral6behavioral7
    • Target
      data/flutter_assets/assets/dll/wx_key.dll
    • Size 134KB
    • SHA256 f946ef8cb2a59bc03ce0b6ae0e22ed905a57e4c8228ed6b1c2b07fd54ecb9a05
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8behavioral9
    • Target
      data/flutter_assets/assets/silk_v3_decoder.exe
    • Size 174KB
    • SHA256 afe908fdf8bb5ddc3566caef224a365159a6216e517d8a915db50ce5ecf86d1b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral11
    • Target
      data/flutter_assets/packages/jieba_flutter/assets/dict.txt
    • Size 5.2MB
    • SHA256 6dff43cac73bbdf571ca96f58615524d9e6b4adb4c8a94b362cd3030bb7bc755
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral12behavioral13
    • Target
      echotrace.exe
    • Size 93KB
    • SHA256 5474723a0bcd2b1a5c4e92a0e13638fc588360623248def2a313c1b61d25bf05
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14behavioral15
    • Target
      file_saver_plugin.dll
    • Size 85KB
    • SHA256 cb39f70da55bbc4178f13e0e9a42c160a466b96f7db417c7bab0663f612824ab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral16behavioral17
    • Target
      flutter_windows.dll
    • Size 17.7MB
    • SHA256 1f4215e1072dd9e34f4565b74310e6771364e1470c7e92214bca64947bd012a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral18behavioral19
    • Target
      go_decrypt.dll
    • Size 1.9MB
    • SHA256 021b52e6c91c099745be540328f84329db0f3421d95b07b9ff3722a9f632ecdf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral20behavioral21
    • Target
      mp3lame.dll
    • Size 312KB
    • SHA256 20ee68354f6f5d06717bcbc5a4aea92b5bd5739df08e601d2fafe349c21f502a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral22behavioral23
    • Target
      sqlite3.x64.windows.dll
    • Size 1.6MB
    • SHA256 0346fa010bb70ea04a08d6a6c88e8ac3041b03171ac95a4c8252e55c219cb7e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral24behavioral25
    • Target
      url_launcher_windows_plugin.dll
    • Size 96KB
    • SHA256 e674574bec6d127faf0cfef5dcd075c8d5f3bc8a903be084fb37a0aaa10229d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral26behavioral27
    • Target
      zstd.dll
    • Size 623KB
    • SHA256 3103dec211e27b6b2c767632a730d084e3f4231379a27361836ae39b9ac30086
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral28behavioral29
    • Target
      zstd_native.dll
    • Size 9KB
    • SHA256 4601530f8a38e409b9556dbb0ac6abdfb63092c8900c0a28909ab8781815e9c5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral30behavioral31

MITRE ATT&CK Enterprise v16

Tasks