General

  • Target

    tmp

  • Size

    1.3MB

  • Sample

    230214-h1t2dabe99

  • MD5

    5be16092369c11fc13c6bf74d8433513

  • SHA1

    030010418b8bcacead3e80cb419628d905f90712

  • SHA256

    e4aa364614621c16aa32375dba2ef49f4aadc0c4d460d25d9ef0b644398e5dfa

  • SHA512

    3c346e8d8f48d500d28710f24de40803040bf5075320fb1168f9ed06435ef1463d958e7dbe0f221fdf113799a2d03d4a3b8bd46ff0ef6d669f6e4589c8734e58

  • SSDEEP

    24576:x+7CkH+O5MMsj/8oJ0HOgwzMIdEyaXC772Q9NXw2/wPOjdGxYM:x+zHZ5MMpoJOp+MIVai7Tq24GjdGS

Score
10/10

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Attributes
  • payload_urls

    http://167.88.170.23/swo/sw.exe

    http://167.88.170.23/swo/swo.exe

Targets

    • Target

      tmp

    • Size

      1.3MB

    • MD5

      5be16092369c11fc13c6bf74d8433513

    • SHA1

      030010418b8bcacead3e80cb419628d905f90712

    • SHA256

      e4aa364614621c16aa32375dba2ef49f4aadc0c4d460d25d9ef0b644398e5dfa

    • SHA512

      3c346e8d8f48d500d28710f24de40803040bf5075320fb1168f9ed06435ef1463d958e7dbe0f221fdf113799a2d03d4a3b8bd46ff0ef6d669f6e4589c8734e58

    • SSDEEP

      24576:x+7CkH+O5MMsj/8oJ0HOgwzMIdEyaXC772Q9NXw2/wPOjdGxYM:x+zHZ5MMpoJOp+MIVai7Tq24GjdGS

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks