General
-
Target
0ce0d5b2b434c3fa1703b1c4d1c9d796aacd4e13060af3a0a4d9f7f65918ad9c
-
Size
2.3MB
-
Sample
221201-c29kkafh93
-
MD5
ec5e89a39b3e7c6d0355e2e1f59828d7
-
SHA1
1242361e90dd6eddbc90a2e462e248389da2b922
-
SHA256
0ce0d5b2b434c3fa1703b1c4d1c9d796aacd4e13060af3a0a4d9f7f65918ad9c
-
SHA512
82337b3386d7cef5e339fa702835d0349d6791523d91e1969fbc5b8a824559eb94af8788926a483117718dd2e90264391913a8a2beb1d88d5e7506323637e845
-
SSDEEP
49152:EqJDZveZq18/HQUp5KfiXZiLIg5Tg8xSU7JZae:lZvek2p5eiQLIQTf7Jt
Static task
static1
Behavioral task
behavioral1
Sample
0ce0d5b2b434c3fa1703b1c4d1c9d796aacd4e13060af3a0a4d9f7f65918ad9c.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/w993.exe
http://167.88.170.23/s101.exe,http://167.88.170.23/101.exe,http://167.88.170.23/R101.exe
Targets
-
-
Target
0ce0d5b2b434c3fa1703b1c4d1c9d796aacd4e13060af3a0a4d9f7f65918ad9c
-
Size
2.3MB
-
MD5
ec5e89a39b3e7c6d0355e2e1f59828d7
-
SHA1
1242361e90dd6eddbc90a2e462e248389da2b922
-
SHA256
0ce0d5b2b434c3fa1703b1c4d1c9d796aacd4e13060af3a0a4d9f7f65918ad9c
-
SHA512
82337b3386d7cef5e339fa702835d0349d6791523d91e1969fbc5b8a824559eb94af8788926a483117718dd2e90264391913a8a2beb1d88d5e7506323637e845
-
SSDEEP
49152:EqJDZveZq18/HQUp5KfiXZiLIg5Tg8xSU7JZae:lZvek2p5eiQLIQTf7Jt
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-