General

  • Target

    02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08.bin

  • Size

    811KB

  • Sample

    220517-ncbg1sdfep

  • MD5

    7a595e537041af7a24c5e83e773bb3eb

  • SHA1

    2c2a9f52303694aa8682774ce36ed09a9bae2f92

  • SHA256

    02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08

  • SHA512

    70b488fcb7a4517e1b184c1ebd910a4ab113499506d4844252290a82db8ae89e982ef0a5c7200648bf28a8c3e88208823e463d790e14768c383cd77451ec780d

Malware Config

Targets

    • Target

      02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08.bin

    • Size

      811KB

    • MD5

      7a595e537041af7a24c5e83e773bb3eb

    • SHA1

      2c2a9f52303694aa8682774ce36ed09a9bae2f92

    • SHA256

      02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08

    • SHA512

      70b488fcb7a4517e1b184c1ebd910a4ab113499506d4844252290a82db8ae89e982ef0a5c7200648bf28a8c3e88208823e463d790e14768c383cd77451ec780d

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eternitypr .net in TLS SNI)

      suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eternitypr .net in TLS SNI)

    • suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eterprx .net in TLS SNI)

      suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eterprx .net in TLS SNI)

    • suricata: ET MALWARE Win32/Eternity Stealer Activity (POST)

      suricata: ET MALWARE Win32/Eternity Stealer Activity (POST)

    • suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eternitypr .net)

      suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eternitypr .net)

    • suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eterprx .net)

      suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eterprx .net)

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks