General

  • Target

    0c158c613020ccee1f0a847af22e812b.bin

  • Size

    4.3MB

  • Sample

    230311-bgen1sga46

  • MD5

    a4c315e136f79bb4b4e2ccb588dbcb01

  • SHA1

    16cdcc442478b496c5231a91c604fc137a5436f1

  • SHA256

    a8841261e8348f8a093efbe9ff02626dfda2deb6a0f16506f35df7402f6e3f88

  • SHA512

    7eef95e93766eb91f58a2591858466ab0e3253f25cdf5af153d2f7010491d8b02ba64b17a214a07d198deb2e725606f97ab146a2e236d170f397f155dac62b35

  • SSDEEP

    98304:HOAyctklP7M9Uc0hnIgUdgkSgws1yYzWuwbp:HOANilaV0hIgGgkSe1NQbp

Malware Config

Targets

    • Target

      479354191ee61a48e8330c242c25cc40fab9d14e8ae11c46bab377a9ca72fe20.exe

    • Size

      5.7MB

    • MD5

      0c158c613020ccee1f0a847af22e812b

    • SHA1

      1782efa3990505c5eaa67ae97fdd58acdd7fa77d

    • SHA256

      479354191ee61a48e8330c242c25cc40fab9d14e8ae11c46bab377a9ca72fe20

    • SHA512

      e4e9be53b79e417a7ae97288aa1fb79eeaa5253c70524bc1dd87acd6d3838e4d7ad7e3ecbdbb00835a56d77fcb59080d6727147c88af1dd0c5ea37338c57d6b0

    • SSDEEP

      98304:fA0BK0SjRd/sgrZxumE0+j75AVSiFwntBgYGPFW4R7o+mSA1IJlWw20unynRQ:fAKVqd0gtxp+IFsg/hVmSAy6Eq

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks