Overview

overview

10

Static

static

0028f5c899...f4.exe

windows7_x64

10

0028f5c899...f4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0028f5c899747c7800de3f520c7dd7937e6b14c321041e16d0fe8be95fafe4f4.bin

  • Size

    1.4MB

  • Sample

    220517-npz15sdhcj

  • MD5

    a79ff5d8771b2bca9c7044d5b50a95ed

  • SHA1

    ed821db96f236709549444a57a1fdf1280400cc4

  • SHA256

    0028f5c899747c7800de3f520c7dd7937e6b14c321041e16d0fe8be95fafe4f4

  • SHA512

    23fc1ec4da678188f2ba75122198aae73052b1df87e2e6431f7fdb0d31781a1fc1e89f9e3d08adc1d137b998e43863b7399d54dc178d3910df48fcbe8460c05e

Score
10/10
eternityspywarestealerworm

Malware Config

Targets

    • Target

      0028f5c899747c7800de3f520c7dd7937e6b14c321041e16d0fe8be95fafe4f4.bin

    • Size

      1.4MB

    • MD5

      a79ff5d8771b2bca9c7044d5b50a95ed

    • SHA1

      ed821db96f236709549444a57a1fdf1280400cc4

    • SHA256

      0028f5c899747c7800de3f520c7dd7937e6b14c321041e16d0fe8be95fafe4f4

    • SHA512

      23fc1ec4da678188f2ba75122198aae73052b1df87e2e6431f7fdb0d31781a1fc1e89f9e3d08adc1d137b998e43863b7399d54dc178d3910df48fcbe8460c05e

    Score
    10/10
    eternityspywarestealerworm

    • Detects Eternity worm

      worm

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks