Overview

overview

10

Static

static

10

25b4a9aa2a...c4.exe

windows7-x64

10

25b4a9aa2a...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27d3a6830b69e204d697b55973f8aeee.bin

  • Size

    126KB

  • Sample

    230311-bk29gshg7t

  • MD5

    e6df9da1a44f66d20873461f963d4dd3

  • SHA1

    d3b5d5668c0b3d787e34af2a8c9e20bb20580968

  • SHA256

    7f7c28d53e6eec338b6e953650efd9125b71efb5b4e408e71af49acf4e8ee862

  • SHA512

    69270f49afd40782c441a6139fa98fcd75e869fe340ee8ca008f80ddce165b8c50bd649611d5a78541191fa8a584622994bf9ee98b2788267cb1330075b0286f

  • SSDEEP

    3072:C3H237g8/XtOEL3OaMUBCBB1f0kM9+KyI5o+BYMrBU9r:2H47LO86B1f054KyjDYsr

Score
10/10
eternitydiscovery

Malware Config

Targets

    • Target

      25b4a9aa2ac6722d1369c5a5d78aeeadb2cfffb4dc85be0878e6a7c84cee57c4.exe

    • Size

      170KB

    • MD5

      27d3a6830b69e204d697b55973f8aeee

    • SHA1

      290a3ac46cad1085619f251ed2bb8617d4925d71

    • SHA256

      25b4a9aa2ac6722d1369c5a5d78aeeadb2cfffb4dc85be0878e6a7c84cee57c4

    • SHA512

      9563bf93ed16298ee0a8efca9cb07b811deefb7ebdb48f87a926b5e4884405ac3bd1e0990000020ffdf8c228d57a61ea89292037cc5a68b8d0bf72501175581c

    • SSDEEP

      3072:H5Amlz0sC++in5op8sNjlL7473FwtYA2JoMX4PuYNWwI1GJ171dwY2TIof:Z3m5pA7V/Lsw1A1pdPFo

    Score
    10/10
    eternitydiscovery

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks