General
-
Target
e8eeec263be0e7b249b8e16ef458a6d4c5241d5fb868e975666bab0658344edc
-
Size
2.2MB
-
Sample
221130-vd4cragh65
-
MD5
9b04bee73265c18fb37dc762ad0ef630
-
SHA1
601ae17fc243ff04210226840d311056afac1ac3
-
SHA256
e8eeec263be0e7b249b8e16ef458a6d4c5241d5fb868e975666bab0658344edc
-
SHA512
3fdec20d310f8e62ac8c3a528e159cca6f14b17cf36cc1bc0084fba8c4aca50fc904d731523b68bcf2a742afe4afcf8d5d40fb8825f79b75762c8234a84577f9
-
SSDEEP
49152:nvhJpDW35RtymHRno4q4YISDt/tvs1nYtUL0EgLh:nvJDWB/YISDtFsFYtULaV
Static task
static1
Behavioral task
behavioral1
Sample
e8eeec263be0e7b249b8e16ef458a6d4c5241d5fb868e975666bab0658344edc.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/w993.exe
http://167.88.170.23/s101.exe,http://167.88.170.23/101.exe,http://167.88.170.23/R101.exe
Targets
-
-
Target
e8eeec263be0e7b249b8e16ef458a6d4c5241d5fb868e975666bab0658344edc
-
Size
2.2MB
-
MD5
9b04bee73265c18fb37dc762ad0ef630
-
SHA1
601ae17fc243ff04210226840d311056afac1ac3
-
SHA256
e8eeec263be0e7b249b8e16ef458a6d4c5241d5fb868e975666bab0658344edc
-
SHA512
3fdec20d310f8e62ac8c3a528e159cca6f14b17cf36cc1bc0084fba8c4aca50fc904d731523b68bcf2a742afe4afcf8d5d40fb8825f79b75762c8234a84577f9
-
SSDEEP
49152:nvhJpDW35RtymHRno4q4YISDt/tvs1nYtUL0EgLh:nvJDWB/YISDtFsFYtULaV
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-