General
-
Target
01806a0d4b8e1ec385d206d28a27518f1a6c6373061a1e486d21de92b7fe50a8.bin
-
Size
821KB
-
Sample
220517-nbz4zsbab7
-
MD5
f0fb2e060ed8f72274ab31e693d646f1
-
SHA1
3d50e7a572554c7366928f7a165300d2ea60a39c
-
SHA256
01806a0d4b8e1ec385d206d28a27518f1a6c6373061a1e486d21de92b7fe50a8
-
SHA512
b642e31d469fe1e7edfad5172d5bcba2c3929db50e0becc771709ea22b40aa7b64cab0c0bc89c10e1862f60bf943eae7107ae9d905fe425c33cc5be2b245f1c1
Static task
static1
Behavioral task
behavioral1
Sample
01806a0d4b8e1ec385d206d28a27518f1a6c6373061a1e486d21de92b7fe50a8.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
01806a0d4b8e1ec385d206d28a27518f1a6c6373061a1e486d21de92b7fe50a8.bin
-
Size
821KB
-
MD5
f0fb2e060ed8f72274ab31e693d646f1
-
SHA1
3d50e7a572554c7366928f7a165300d2ea60a39c
-
SHA256
01806a0d4b8e1ec385d206d28a27518f1a6c6373061a1e486d21de92b7fe50a8
-
SHA512
b642e31d469fe1e7edfad5172d5bcba2c3929db50e0becc771709ea22b40aa7b64cab0c0bc89c10e1862f60bf943eae7107ae9d905fe425c33cc5be2b245f1c1
-
Detects Eternity stealer
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eternitypr .net in TLS SNI)
suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eternitypr .net in TLS SNI)
-
suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eterprx .net in TLS SNI)
suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eterprx .net in TLS SNI)
-
suricata: ET MALWARE Win32/Eternity Stealer Activity (POST)
suricata: ET MALWARE Win32/Eternity Stealer Activity (POST)
-
suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eternitypr .net)
suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eternitypr .net)
-
suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eterprx .net)
suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eterprx .net)
-
Executes dropped EXE
-
Drops startup file
-