Extracted

• • Target

    tmp

  • Size

    338KB

  • MD5

    922edf09c7065f24862a31baab18555d

  • SHA1

    1994f1c1a4929660ab0f14ee3b97d13e315fc9e8

  • SHA256

    2efee059dd0dfda1cd5472b0549d6a319a9b8b9694bbd39a9b34b5397f316624

  • SHA512

    373c62aef1c485fd28741b93bc35f29ebb89d4bb82c9c4eb8426b81d9b8ca0fb496286e95eb212a0758682d4368d7314cb4f100920673ef96dfdf9820946402e

  • SSDEEP

    6144:QyQ99mZlQNkfuauSOq4Qc0IUidR5vSVEO6dxhqf0jFNEJ+uVEjcy1r2bGai:QyQ9EZKUidR5vfxhawYVCcy1

  Score

  10^/10

  eternitycollectionspywarestealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2