Overview

overview

10

Static

static

002f33f2dc...1f.exe

windows7_x64

10

002f33f2dc...1f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f.bin

  • Size

    1.3MB

  • Sample

    220517-np9wcabcb7

  • MD5

    57d27e1d68368a93633d6ea1162a50b6

  • SHA1

    2b69f4f6e52fb85589508e711161adc7c79da469

  • SHA256

    002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f

  • SHA512

    adbd3f6bec1aed98fe4f911b57eb3fdeb4872ce7908aae752db8c3aa467016a340edc1e503522e3396adad73adb65c06b0e6f96faba6a425fcb75e34e77113e7

Score
10/10
eternityspywarestealerworm

Malware Config

Targets

    • Target

      002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f.bin

    • Size

      1.3MB

    • MD5

      57d27e1d68368a93633d6ea1162a50b6

    • SHA1

      2b69f4f6e52fb85589508e711161adc7c79da469

    • SHA256

      002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f

    • SHA512

      adbd3f6bec1aed98fe4f911b57eb3fdeb4872ce7908aae752db8c3aa467016a340edc1e503522e3396adad73adb65c06b0e6f96faba6a425fcb75e34e77113e7

    Score
    10/10
    eternityspywarestealerworm

    • Detects Eternity worm

      worm

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks