General
-
Target
0x0006000000022e7a-289.dat
-
Size
334KB
-
Sample
220930-zxyntsfggq
-
MD5
2d47c689ac25b293acccdb4334148d17
-
SHA1
8f5800cc1529be5cd153e3dd87a93e598dc9e081
-
SHA256
2a926306d0dc0f78f4eb24304be2e680f3af4a766f84c781354f29aa2adc70cd
-
SHA512
1a66302aacf06f62b8481ce729e507cc21cb966d24a351aa45740812f44d5fa5a9516df6b65102a3f597a267983fe8d38b43c641cf931b13189e4fb9ea274ba3
-
SSDEEP
6144:QWudkxi6DUpCNkXYTSumV3XmNXJoYcI/xekYD2b2ooE8:QWudkuI2B1XkjcI85DDE
Behavioral task
behavioral1
Sample
0x0006000000022e7a-289.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0x0006000000022e7a-289.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
eternity
http://rlcjba7wduej3xcstcjo577eqgjsjvcjfsw4i23fqvf2y27ylylhmhad.onion
Targets
-
-
Target
0x0006000000022e7a-289.dat
-
Size
334KB
-
MD5
2d47c689ac25b293acccdb4334148d17
-
SHA1
8f5800cc1529be5cd153e3dd87a93e598dc9e081
-
SHA256
2a926306d0dc0f78f4eb24304be2e680f3af4a766f84c781354f29aa2adc70cd
-
SHA512
1a66302aacf06f62b8481ce729e507cc21cb966d24a351aa45740812f44d5fa5a9516df6b65102a3f597a267983fe8d38b43c641cf931b13189e4fb9ea274ba3
-
SSDEEP
6144:QWudkxi6DUpCNkXYTSumV3XmNXJoYcI/xekYD2b2ooE8:QWudkuI2B1XkjcI85DDE
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-