Overview

overview

10

Static

static

10

86a5031c61...34.exe

windows7-x64

10

86a5031c61...34.exe

windows10-2004-x64

10

Resubmissions

16/12/2022, 00:18

221216-alnxtadg78 10

15/12/2022, 23:56

221215-3y6bvadg59 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sample1_pw_infected.zip

  • Size

    298KB

  • Sample

    221215-3y6bvadg59

  • MD5

    f33917c1fb170aafafc87e251cc74ef5

  • SHA1

    dfb633a3717ca91b7de9d0056a54926daa6326cf

  • SHA256

    9d0b5cf34263312fbaf1d82f02e53e1565c4c704fd02dca76b9f2cecd7b329d9

  • SHA512

    a1cc03b2eb5fba81e6f31ce07983ee10f6a1a69c24a4123ad5b5a9741a41a728123ca59fd673f19a16def56bd88d553bd60ae66243152d7d05fcf09721feea46

  • SSDEEP

    6144:zuelKwOsEGnoRJTe+jeEZjxN2v6I7oH2TzqBiK7z5jmtL4YmW8PNad:zuS2GnKjtOKWTzqBT5jmh4YuPa

Score
10/10
eternitycollectionspywarestealer

Malware Config

Targets

    • Target

      86a5031c61d87baacc955ed6a7b295357c8d5e8e5058903d0f55565730462b34

    • Size

      638KB

    • MD5

      c504c32724031c8f76df40b6b97c0338

    • SHA1

      d7fc15b41e747ce3916986787c1d210b73382c11

    • SHA256

      86a5031c61d87baacc955ed6a7b295357c8d5e8e5058903d0f55565730462b34

    • SHA512

      8ba67465990edacfa144ab6513aad48172301d222a26d2cd4210ce9c8e60129263b1d768b27d194472cff21b2394ab90e922b086c91e0e544401c1449922a4ac

    • SSDEEP

      12288:Dag0l8Q2tRtuDOwFnzkikHuBv2WhpSJgn/Y47QV:dFiPtLpTe

    Score
    10/10
    eternitycollectionspywarestealer

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks