General
-
Target
file.exe
-
Size
2.1MB
-
Sample
230308-qwth2sfb69
-
MD5
0025bb6d0a9d41a97e19d014fd237e09
-
SHA1
2cf196d7bd6ab6a27b2a0605cba0b89fa70d66fb
-
SHA256
4c94ced8bc0b5686daaa87c648fbbf99f5d14cf24befd3a203138505901db038
-
SHA512
23f66dbe24001354d6fbf809208d8994954d9a86d154f72b54a0ec1542885b3777a4efb6a51900deea45acb60c71dc49d6e434391c14d8349b48d8330079cdec
-
SSDEEP
49152:1jzUCIk+1a7hKVy7fH6PlTooUy9KhJNN38g:5UCIk+E7h/fBFGKhF3
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/swo/sw.exe
http://167.88.170.23/swo/swo.exe
Targets
-
-
Target
file.exe
-
Size
2.1MB
-
MD5
0025bb6d0a9d41a97e19d014fd237e09
-
SHA1
2cf196d7bd6ab6a27b2a0605cba0b89fa70d66fb
-
SHA256
4c94ced8bc0b5686daaa87c648fbbf99f5d14cf24befd3a203138505901db038
-
SHA512
23f66dbe24001354d6fbf809208d8994954d9a86d154f72b54a0ec1542885b3777a4efb6a51900deea45acb60c71dc49d6e434391c14d8349b48d8330079cdec
-
SSDEEP
49152:1jzUCIk+1a7hKVy7fH6PlTooUy9KhJNN38g:5UCIk+E7h/fBFGKhF3
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-