Overview

overview

10

Static

static

02cc96d77c...08.exe

windows7_x64

10

02cc96d77c...08.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08.bin

  • Size

    811KB

  • Sample

    220517-ncbg1sdfep

  • MD5

    7a595e537041af7a24c5e83e773bb3eb

  • SHA1

    2c2a9f52303694aa8682774ce36ed09a9bae2f92

  • SHA256

    02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08

  • SHA512

    70b488fcb7a4517e1b184c1ebd910a4ab113499506d4844252290a82db8ae89e982ef0a5c7200648bf28a8c3e88208823e463d790e14768c383cd77451ec780d

Score
10/10
eternitystealersuricata

Malware Config

Targets

    • Target

      02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08.bin

    • Size

      811KB

    • MD5

      7a595e537041af7a24c5e83e773bb3eb

    • SHA1

      2c2a9f52303694aa8682774ce36ed09a9bae2f92

    • SHA256

      02cc96d77c375a798a8e70247ffb52f854b05523bd3d8d2ba6d165e406f76c08

    • SHA512

      70b488fcb7a4517e1b184c1ebd910a4ab113499506d4844252290a82db8ae89e982ef0a5c7200648bf28a8c3e88208823e463d790e14768c383cd77451ec780d

    Score
    10/10
    eternitystealersuricata

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eternitypr .net in TLS SNI)

      suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eternitypr .net in TLS SNI)

      suricata

    • suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eterprx .net in TLS SNI)

      suricata: ET MALWARE Observed Win32/Eternity Stealer Domain (eterprx .net in TLS SNI)

      suricata

    • suricata: ET MALWARE Win32/Eternity Stealer Activity (POST)

      suricata: ET MALWARE Win32/Eternity Stealer Activity (POST)

      suricata

    • suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eternitypr .net)

      suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eternitypr .net)

      suricata

    • suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eterprx .net)

      suricata: ET MALWARE Win32/Eternity Stealer CnC Domain in DNS Lookup (eterprx .net)

      suricata

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks