Overview

overview

10

Static

static

10

d60fd14ef1...a6.exe

windows7-x64

10

d60fd14ef1...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02d145847cb4053180305a7ee1e3ece5.bin

  • Size

    371KB

  • Sample

    230311-bcwfzahg4z

  • MD5

    211239e6b5e4ebe38e06e5c98d7ced64

  • SHA1

    238a6a086f2348fa42d41cb70fa2ba58fa8d03e0

  • SHA256

    977dd61f0c716ec7af6dcd079c2db019e1c9eac76f96c09b10e6fbf972e4767e

  • SHA512

    8d3a1d380df1815c77a3e83863083fd8d4a227851a304f52c45e59dfd44bf040c56276bb5a94ee3272bae240d5f9104fbda09f09effa4519f7fe848ca843d576

  • SSDEEP

    6144:pphwHu8Lg/g3fkRIvD4RBqZU8R++9J6qO1yIY7JxZz3FLTARU5HlJ6:5wO8s/WfkRU4/WUiY1hkxxFPOO6

Score
10/10
eternitydiscovery

Malware Config

Targets

    • Target

      d60fd14ef1d3fa017f3e69529498cfcec9da1a89e9b9529f00f297a2f02a6fa6.exe

    • Size

      451KB

    • MD5

      02d145847cb4053180305a7ee1e3ece5

    • SHA1

      75d954af6b2b5cbe0de7a98dff5cc5200cb02542

    • SHA256

      d60fd14ef1d3fa017f3e69529498cfcec9da1a89e9b9529f00f297a2f02a6fa6

    • SHA512

      f88dd7a40534e1e9fc8f5f2fae1824af4caa6696b90739c080dba2a3293e5a4430aea27e2a2558f2fae4cb94168a50406f1bcb9bc00aab80fa2c4ff83d282897

    • SSDEEP

      12288:sFavSOXNrtNxp/QTIboxj1JUWUncVlkOBapx39PoxfMDUUUUUmgUUUUUU9UUUUUv:dv79rbxpkI0iRK

    Score
    10/10
    eternitydiscovery

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks