General

  • Target

    24b99a15afb676da6886b5b020d938c82704799876d4fcb4d611c7c7188c1e8a

  • Size

    3.3MB

  • Sample

    220915-l991qscfg4

  • MD5

    4d05c920040c671e49187a179033c50b

  • SHA1

    387a1318539ff16974c21ed6e78fbcbe8e73e3fa

  • SHA256

    24b99a15afb676da6886b5b020d938c82704799876d4fcb4d611c7c7188c1e8a

  • SHA512

    f86f5a2e11ceed5a212ae1c61d1c1f31d125ee09cd007610db0db0720fedc08d874807defa029136e6c063ab1e03f47b67298d25a827ebe45ce7f774e5c79849

  • SSDEEP

    49152:Duvjict75qI24MnFmAhxC5fGQRbZtU4axGtOEdzx5onb5EnWcq3jAvKUYgeGc:Duvjict4nFLxafGQNTUNxNMLoVtcWdP

Score
10/10

Malware Config

Extracted

Family

eternity

Attributes
  • payload_urls

    http://178.20.44.214/edgedownload.exe

    http://178.20.44.214/a.exe

Targets

    • Target

      24b99a15afb676da6886b5b020d938c82704799876d4fcb4d611c7c7188c1e8a

    • Size

      3.3MB

    • MD5

      4d05c920040c671e49187a179033c50b

    • SHA1

      387a1318539ff16974c21ed6e78fbcbe8e73e3fa

    • SHA256

      24b99a15afb676da6886b5b020d938c82704799876d4fcb4d611c7c7188c1e8a

    • SHA512

      f86f5a2e11ceed5a212ae1c61d1c1f31d125ee09cd007610db0db0720fedc08d874807defa029136e6c063ab1e03f47b67298d25a827ebe45ce7f774e5c79849

    • SSDEEP

      49152:Duvjict75qI24MnFmAhxC5fGQRbZtU4axGtOEdzx5onb5EnWcq3jAvKUYgeGc:Duvjict4nFLxafGQNTUNxNMLoVtcWdP

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Downloads MZ/PE file

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks