General
-
Target
26fdffa14128573dcdd5d3b64724677e98d7646b623d1e6a7af1a193cca483df
-
Size
1.9MB
-
Sample
221128-dayveshg83
-
MD5
bfa089edb97ae879925dbfa23d4374be
-
SHA1
f080370a3f8c07c2cfc48661caf734f6e053a83f
-
SHA256
26fdffa14128573dcdd5d3b64724677e98d7646b623d1e6a7af1a193cca483df
-
SHA512
3e3b60c3914e8b53cc2c1364eecc53f881449ae4df9429c7435438c277872dcb787313623900a1b7ac28b3aadff41a804a6316f4b5ce75bc175d591d577b461d
-
SSDEEP
49152:3v+Xdh4YFvU1YOf7j/dHxQpa4rL5XOrcuY3J+pdtp93yokVX:6dh4YdCf7h2p7NmjwJ+pY
Static task
static1
Behavioral task
behavioral1
Sample
26fdffa14128573dcdd5d3b64724677e98d7646b623d1e6a7af1a193cca483df.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/w993.exe
http://167.88.170.23/s101.exe,http://167.88.170.23/101.exe,http://167.88.170.23/R101.exe
Targets
-
-
Target
26fdffa14128573dcdd5d3b64724677e98d7646b623d1e6a7af1a193cca483df
-
Size
1.9MB
-
MD5
bfa089edb97ae879925dbfa23d4374be
-
SHA1
f080370a3f8c07c2cfc48661caf734f6e053a83f
-
SHA256
26fdffa14128573dcdd5d3b64724677e98d7646b623d1e6a7af1a193cca483df
-
SHA512
3e3b60c3914e8b53cc2c1364eecc53f881449ae4df9429c7435438c277872dcb787313623900a1b7ac28b3aadff41a804a6316f4b5ce75bc175d591d577b461d
-
SSDEEP
49152:3v+Xdh4YFvU1YOf7j/dHxQpa4rL5XOrcuY3J+pdtp93yokVX:6dh4YdCf7h2p7NmjwJ+pY
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-