General
-
Target
Ransomware.exe
-
Size
112KB
-
Sample
221128-njajasee2x
-
MD5
3e639bb5f41c23fddca94836c44b88a6
-
SHA1
799699566b60733bfc9429b63d63d6bff1d3225a
-
SHA256
d0ce047da46b87372013421553ff5313416364cccaf7f614cd1f20b6e6e741e7
-
SHA512
e4c395cd03d3377fd9cbb19c115496485d7cd62436c0361565bac8485ec33d024959c109a59e646f60f4d9684538ce43c4db3ca8762327847502d6b7222c1d42
-
SSDEEP
3072:aJl5QviHOEB8+Azr2/od+Kb3upxjrGoZji:az5uiHO0F/oMKb+pdrGoZ
Behavioral task
behavioral1
Sample
Ransomware.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Ransomware.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
Ransomware.exe
-
Size
112KB
-
MD5
3e639bb5f41c23fddca94836c44b88a6
-
SHA1
799699566b60733bfc9429b63d63d6bff1d3225a
-
SHA256
d0ce047da46b87372013421553ff5313416364cccaf7f614cd1f20b6e6e741e7
-
SHA512
e4c395cd03d3377fd9cbb19c115496485d7cd62436c0361565bac8485ec33d024959c109a59e646f60f4d9684538ce43c4db3ca8762327847502d6b7222c1d42
-
SSDEEP
3072:aJl5QviHOEB8+Azr2/od+Kb3upxjrGoZji:az5uiHO0F/oMKb+pdrGoZ
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-