General

  • Target

    Stealer.exe

  • Size

    334KB

  • Sample

    221231-xfr4lsac88

  • MD5

    4d87c009a0e9634430d41b963def1aa7

  • SHA1

    8678e9710197c2bb1636127004e3a3924a3ef693

  • SHA256

    1039d1b80a7f277b7d3ee70157cc7a4b73733d36c8ab273a602db272a0ac7603

  • SHA512

    2eb4ca22f154c907e0eb6ad2980e045b2772591028ad35ce491a89b5da01a32ad4952847a81ea3fea5f7e1cda1edb3cade2f03d00905f939fdcf3698bcbaa334

  • SSDEEP

    6144:w99HJ9n/EqgOPWC8BOZaB0ctPNVXY3ibhc9OE:wT998MadR6g

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Targets

    • Target

      Stealer.exe

    • Size

      334KB

    • MD5

      4d87c009a0e9634430d41b963def1aa7

    • SHA1

      8678e9710197c2bb1636127004e3a3924a3ef693

    • SHA256

      1039d1b80a7f277b7d3ee70157cc7a4b73733d36c8ab273a602db272a0ac7603

    • SHA512

      2eb4ca22f154c907e0eb6ad2980e045b2772591028ad35ce491a89b5da01a32ad4952847a81ea3fea5f7e1cda1edb3cade2f03d00905f939fdcf3698bcbaa334

    • SSDEEP

      6144:w99HJ9n/EqgOPWC8BOZaB0ctPNVXY3ibhc9OE:wT998MadR6g

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks