Extracted

• • Target

    Pathfinder_2.19.3.zip

  • Size

    1.9MB

  • MD5

    44e0bdc5f7b10b99e2fbe3f2488e1dfb

  • SHA1

    af35ee5be6d4500bf9b0341b82522877dca54081

  • SHA256

    c6a48b2f3fe21c09e04c1ff2b2430d6a051badf0f6d8a049b132c33c75b30097

  • SHA512

    d7152c515641d48319ddfca76a298d8aa4ddafc2902319057d7a4666c95f169cadfbbe2acbc0c80231c33ddab4836f356a2c88ef86a5db7825a58f222b8fdea7

  • SSDEEP

    49152:hB4z78P6vgbztlDjr000eyPJVuikXmMRAl/qnN:T678Sv0ztZjr5U/uiQAlCN

  Score

  1^/10
  behavioral1behavioral2

• • Target

    Pathfinder_2.19.3/Config.exe

  • Size

    14KB

  • MD5

    04cd708335c58d2c99ed5b40018fceec

  • SHA1

    3f5ed0d4335d341f1e0bdcfefa1f54eb8287dd91

  • SHA256

    fafd5b585332d98774accec4cb4b723450efa24621d2745e37caef92a6005934

  • SHA512

    adb2ff97b137d66821b409640ccebd4aee2440442d11c1b569ba708d62ce5e3fe80f0a229a79fb90154de71163e8b94a07ea61e323cf13b9725ec421c18262a6

  • SSDEEP

    384:kqpn9O91vTUblKJ1Ad2GYWdmbVYzyPvw/a8dOtZ+C:5FXYtb5Y6

  Score

  10^/10

  eternity

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral3behavioral4

• • Target

    Pathfinder_2.19.3/Pathfinder_Builder.exe

  • Size

    3.8MB

  • MD5

    89817a0ea4add5696282c943839b64c1

  • SHA1

    217890e8db8ea736f8a84ea9c1835c22c845a240

  • SHA256

    0a7e31c92f26713ba2787eb9172d4a5a105e88ca3cc739e4c62890d263fd1fa0

  • SHA512

    0a39c64b90656820ed9298a793f8d3016a0d629e88506c51410d32afe6746b75d510965014b9414a4c3f63efb54bacff16e79bfc74feb76ea15fd22b9c63bedf

  • SSDEEP

    49152:WHFNVHFpNDv8w7v8xQlPRNso1tCbgJ16LC3s3f2gzKpU5EsjpwKjeQO5nGTBLprH:Ib8xQZ3si2uVQSi9jdl

  Score

  7^/10

  spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral5behavioral6