Overview

overview

10

Static

static

07ad17755d...ed.exe

windows7_x64

10

07ad17755d...ed.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    07ad17755db73a41a93d25bb227e412e062721a60b0541f3510ac7cbd57aa3ed.bin
  • Size 1.4MB
  • Sample220603-j52sfshdcl
  • SHA256 07ad17755db73a41a93d25bb227e412e062721a60b0541f3510ac7cbd57aa3ed
  • MD5 SHA1 SHA512
Score
10/10
eternityworm

Malware Config

Extracted

Family

  • eternity

C2

  • http://lightnogu5owjjllyo4tj2sfos6fchnmcidlgo6c7e6fz2hgryhfhoyd.onion

Attributes
  • payload_urls

    http://soapbeginshops.com/kingz.exe

    http://lightnogu5owjjllyo4tj2sfos6fchnmcidlgo6c7e6fz2hgryhfhoyd.onion/shared/telegram.exe

Targets

    • Target
      07ad17755db73a41a93d25bb227e412e062721a60b0541f3510ac7cbd57aa3ed.bin
    • Size 1.4MB
    • SHA256 07ad17755db73a41a93d25bb227e412e062721a60b0541f3510ac7cbd57aa3ed
    • MD5 SHA1 SHA512
    Score
    10/10
    eternityworm

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks