General

  • Target

    55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91

  • Size

    64KB

  • Sample

    220516-hnmfrsfeb6

  • MD5

    76c5b877fb931ed728df30c002bf8823

  • SHA1

    16a8a21ef1a30849bedc514e42286de7676db5af

  • SHA256

    55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91

  • SHA512

    3ed1568c7650f536b91bea3de2afaf0e01f81d986c2968d012622fc542c06d536bf5b17e615ecbab0c89dafb600f1f245c84a9f13f45e8e03481a2d51e20728c

Malware Config

Targets

    • Target

      55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91

    • Size

      64KB

    • MD5

      76c5b877fb931ed728df30c002bf8823

    • SHA1

      16a8a21ef1a30849bedc514e42286de7676db5af

    • SHA256

      55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91

    • SHA512

      3ed1568c7650f536b91bea3de2afaf0e01f81d986c2968d012622fc542c06d536bf5b17e615ecbab0c89dafb600f1f245c84a9f13f45e8e03481a2d51e20728c

    • Detects Eternity ransomware

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Tasks