General

  • Target

    9789094abf2701e86cb3032f347317ff4bc459a870456eec1cee893f69f2b9ba

  • Size

    39KB

  • Sample

    221225-18kf1sfd2w

  • MD5

    d773482a983fd33cc15127664886a4fa

  • SHA1

    2fb93d865510a75e176a568f3ae45ce5f9df4ecc

  • SHA256

    9789094abf2701e86cb3032f347317ff4bc459a870456eec1cee893f69f2b9ba

  • SHA512

    57d6f8d9d367c448979ff8ee6ba96b32f669fec6b4bd77098afbd47f8364c589e1c9a5f6c19779c73716c2c75c27f545a52cfc11fe3af3854d052cf7152aaab6

  • SSDEEP

    768:AfXqEtaK5FSVBaXDBGXWLEvx7nkbAfUA3sX2w4P4i/XMAN:+XqEtaKvwclAzkbSU1X2wkh/X3

Score
10/10

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Wallets

457KbHnrw5UhiUYyGBvpSpbjL9QfnZDDdgsoPDEyh582AjaDbcg4jg4TJDAiFE7hcSHYFkabYPr2CabdMCBnixCMD5Mgro9

bc1qkzq3sld4p5azj28tq9z9j8p6rch9p3d8n3r7cs

qqa9as4ckr4lrlx67dv7774p48rurdjqcg3cjelvhl

0x97b46BA07f05ce352607280E9ebEBC72617C89b3

DMQ8aTrNGCtsFsGPZcY8mQeZuVm3rDjxR8

TUW4jEtXk6ZLvoFNBTMBY24ihznz3NJ6Ja

LXNpuiu1Q1g6SEkDw8N53itnEY57UVYuUU

rpLGegiSnditNEqF2zJC2XXomosWus8j3o

t1WdJExTzEkDJh4pKsVTDxLsgGGxHLZRq3G

XqPoh67MJLcfsxpTg8cuiT9JhP6kiPSutG

AbKoTUa4FhiduGqJoTYAkpfYN4rYQhwfUf

GCE3GHBNOMNGZZRL3XN6HMNTEMLWA6UBOBIBOYY7AFYQ5IVNBYIVRBPD

bnb1s524r4a2edst2k7634tfek8rrjry5nfq0paf6y

8z54uLQN91kc5NfA1s33oiv5q6sye6NemTNT2zZtvjFt

MYNPHZEKQ7Y4PFCN5SPSPKXXMDW5YZVQ42TFZMFNURPGLOGMX6NAFQJHFE

Targets

    • Target

      9789094abf2701e86cb3032f347317ff4bc459a870456eec1cee893f69f2b9ba

    • Size

      39KB

    • MD5

      d773482a983fd33cc15127664886a4fa

    • SHA1

      2fb93d865510a75e176a568f3ae45ce5f9df4ecc

    • SHA256

      9789094abf2701e86cb3032f347317ff4bc459a870456eec1cee893f69f2b9ba

    • SHA512

      57d6f8d9d367c448979ff8ee6ba96b32f669fec6b4bd77098afbd47f8364c589e1c9a5f6c19779c73716c2c75c27f545a52cfc11fe3af3854d052cf7152aaab6

    • SSDEEP

      768:AfXqEtaK5FSVBaXDBGXWLEvx7nkbAfUA3sX2w4P4i/XMAN:+XqEtaKvwclAzkbSU1X2wkh/X3

    Score
    10/10
    • Detects Eternity clipper

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks