General
-
Target
tmp
-
Size
2.0MB
-
Sample
230315-jq3ffaeb31
-
MD5
75d1157a83de1c98432a3e6dc1af1f7a
-
SHA1
e8c13912390b1a713eed8037ce1130006bbd6287
-
SHA256
7b3eed5a83ba7d77cf91e87d1d200d0211fa8e3c9eaa557996ba9487023b28d3
-
SHA512
8dfba082b359bbae8beb68df037df753a6c139b651643ca4b41af0917a5747b6e97c7c35570b00345c3374c08c2765f694b16e8876a111bb046e1cf484f344c5
-
SSDEEP
49152:kewfU55EpWVvII0CccXVoBljNSok3AjyUHVulS/DVvM+oe+yE5:kews55EeAI0CNFCUtMulSJBoVyE
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/swo/sw.exe
http://167.88.170.23/swo/swo.exe
Targets
-
-
Target
tmp
-
Size
2.0MB
-
MD5
75d1157a83de1c98432a3e6dc1af1f7a
-
SHA1
e8c13912390b1a713eed8037ce1130006bbd6287
-
SHA256
7b3eed5a83ba7d77cf91e87d1d200d0211fa8e3c9eaa557996ba9487023b28d3
-
SHA512
8dfba082b359bbae8beb68df037df753a6c139b651643ca4b41af0917a5747b6e97c7c35570b00345c3374c08c2765f694b16e8876a111bb046e1cf484f344c5
-
SSDEEP
49152:kewfU55EpWVvII0CccXVoBljNSok3AjyUHVulS/DVvM+oe+yE5:kews55EeAI0CNFCUtMulSJBoVyE
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-