Extracted

• • Target
    2fe0a96562d37f562e983aa77cca5018.bin
  • Size 830KB
  • SHA256 f4c69cc748d3614f1ac9a32db3c24f756532cb96ebe520344567fc0e29af93fa
  • MD5 2fe0a96562d37f562e983aa77cca5018
  • SHA1 93f2dd9d3cfdf6c1696c6b4091100edc3638bcc5
  • SHA512 d61ac67afca3c7ef1bd69dd1f4d218f0799654d2b3ead78a3857420c046d81d21107520d1a675a2cda85463e6d88a51e5c257ad344d1823ff37fc36a36179aa7
  • MD5 SHA1 SHA512

  Score

  10^/10

  eternitycollectionpersistencespywarestealer

  • Detects Eternity stealer

    stealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Adds Run key to start application

    persistence

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2