General

  • Target

    tmp

  • Size

    2.0MB

  • Sample

    230315-jq3ffaeb31

  • MD5

    75d1157a83de1c98432a3e6dc1af1f7a

  • SHA1

    e8c13912390b1a713eed8037ce1130006bbd6287

  • SHA256

    7b3eed5a83ba7d77cf91e87d1d200d0211fa8e3c9eaa557996ba9487023b28d3

  • SHA512

    8dfba082b359bbae8beb68df037df753a6c139b651643ca4b41af0917a5747b6e97c7c35570b00345c3374c08c2765f694b16e8876a111bb046e1cf484f344c5

  • SSDEEP

    49152:kewfU55EpWVvII0CccXVoBljNSok3AjyUHVulS/DVvM+oe+yE5:kews55EeAI0CNFCUtMulSJBoVyE

Score
10/10

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Attributes
  • payload_urls

    http://167.88.170.23/swo/sw.exe

    http://167.88.170.23/swo/swo.exe

Targets

    • Target

      tmp

    • Size

      2.0MB

    • MD5

      75d1157a83de1c98432a3e6dc1af1f7a

    • SHA1

      e8c13912390b1a713eed8037ce1130006bbd6287

    • SHA256

      7b3eed5a83ba7d77cf91e87d1d200d0211fa8e3c9eaa557996ba9487023b28d3

    • SHA512

      8dfba082b359bbae8beb68df037df753a6c139b651643ca4b41af0917a5747b6e97c7c35570b00345c3374c08c2765f694b16e8876a111bb046e1cf484f344c5

    • SSDEEP

      49152:kewfU55EpWVvII0CccXVoBljNSok3AjyUHVulS/DVvM+oe+yE5:kews55EeAI0CNFCUtMulSJBoVyE

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks