General

  • Target

    002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f.bin

  • Size

    1.3MB

  • Sample

    220517-np9wcabcb7

  • MD5

    57d27e1d68368a93633d6ea1162a50b6

  • SHA1

    2b69f4f6e52fb85589508e711161adc7c79da469

  • SHA256

    002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f

  • SHA512

    adbd3f6bec1aed98fe4f911b57eb3fdeb4872ce7908aae752db8c3aa467016a340edc1e503522e3396adad73adb65c06b0e6f96faba6a425fcb75e34e77113e7

Malware Config

Targets

    • Target

      002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f.bin

    • Size

      1.3MB

    • MD5

      57d27e1d68368a93633d6ea1162a50b6

    • SHA1

      2b69f4f6e52fb85589508e711161adc7c79da469

    • SHA256

      002f33f2dc005b1f1162b27707aa2877c9d11b2e118ed0b82c711ee2e4491c1f

    • SHA512

      adbd3f6bec1aed98fe4f911b57eb3fdeb4872ce7908aae752db8c3aa467016a340edc1e503522e3396adad73adb65c06b0e6f96faba6a425fcb75e34e77113e7

    • Detects Eternity worm

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks