Resubmissions
08/02/2023, 10:21
230208-mdm2rsac95 10Behavioral task
behavioral1
Sample
eternity.bin.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eternity.bin.exe
Resource
win10v2004-20220812-en
General
-
Target
eternity.bin.exe
-
Size
335KB
-
MD5
5edb806bdb9c9722ef3e462c2de79387
-
SHA1
7f578ee428b4ea2a735c078db6ee0c567afe7d20
-
SHA256
a0bc1875cfc85a930f69f40d2c1b66b9de3d79382b2e2c47f5ad60759944335b
-
SHA512
b482726f968db6c966533737c1a996adbaceb231be8f08486ffa1607d5a65900e8a34e3781bc97a4a2b4055750a111265cc69ae366cad9d25cb8071223934b7e
-
SSDEEP
6144:OyO9/ci8TuAlc76woqxf8wXo/Er2Ebhvp6bRleZD:OlUiYc76wjjnrR
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
Signatures
-
Eternity family
Files
-
eternity.bin.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ