Overview

overview

10

Static

static

tmp.exe

windows7-x64

3

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    1.8MB

  • Sample

    221130-pkp6tada8t

  • MD5

    44effc7911d5d30eee8046847b5e51a0

  • SHA1

    9f056d46778af4c12965b6da6adf7e8bd4c1e801

  • SHA256

    6d46c2fe42b53385f98f417e5e79b56ee12a3153ad7304a334bc2b4541d84e81

  • SHA512

    f929769ba14b0564a8f5ad8d9604d8d9106233e459ab4556cfa22d9d2257318b84dc4a1854401e410b65ef612bca8de36830736f14bcb5a2940d3f492126e575

  • SSDEEP

    49152:IBJ5w3gdZHOAWxTAwslyNIlS7PFO9KP142cgXWef:yw38R5pY0EQx2hGk

Score
10/10
eternityworm

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Targets

    • Target

      tmp

    • Size

      1.8MB

    • MD5

      44effc7911d5d30eee8046847b5e51a0

    • SHA1

      9f056d46778af4c12965b6da6adf7e8bd4c1e801

    • SHA256

      6d46c2fe42b53385f98f417e5e79b56ee12a3153ad7304a334bc2b4541d84e81

    • SHA512

      f929769ba14b0564a8f5ad8d9604d8d9106233e459ab4556cfa22d9d2257318b84dc4a1854401e410b65ef612bca8de36830736f14bcb5a2940d3f492126e575

    • SSDEEP

      49152:IBJ5w3gdZHOAWxTAwslyNIlS7PFO9KP142cgXWef:yw38R5pY0EQx2hGk

    Score
    10/10
    eternityworm

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks