General

  • Target

    479354191ee61a48e8330c242c25cc40fab9d14e8ae11c46bab377a9ca72fe20.zip

  • Size

    4.3MB

  • Sample

    230321-rt7hkaah73

  • MD5

    d95ea0431fd9d0c29ae5104ee31c316a

  • SHA1

    897f88c62665859c3c459d438d24a1d1836dbed0

  • SHA256

    2018cdac7405e098e43ad47244794ea82aac5aa9970709c02ab6d90f2e0b3df7

  • SHA512

    1aa2b0135bf8ae818ab422b533c6ee8b23c72a6b8334aff63a0736f46a8782fa77faf390ad74cc525c309bc4d8f04f59d966972297b090831577b285ca668d93

  • SSDEEP

    98304:3xkjroG9HjhYcf2BV3RBKOCyCwUgMzZ/brgsZFFDzr1Ehz+1C:3iPT9+42BV3RmK9O/3gsZL1EhzwC

Malware Config

Targets

    • Target

      479354191ee61a48e8330c242c25cc40fab9d14e8ae11c46bab377a9ca72fe20.exe

    • Size

      5.7MB

    • MD5

      0c158c613020ccee1f0a847af22e812b

    • SHA1

      1782efa3990505c5eaa67ae97fdd58acdd7fa77d

    • SHA256

      479354191ee61a48e8330c242c25cc40fab9d14e8ae11c46bab377a9ca72fe20

    • SHA512

      e4e9be53b79e417a7ae97288aa1fb79eeaa5253c70524bc1dd87acd6d3838e4d7ad7e3ecbdbb00835a56d77fcb59080d6727147c88af1dd0c5ea37338c57d6b0

    • SSDEEP

      98304:fA0BK0SjRd/sgrZxumE0+j75AVSiFwntBgYGPFW4R7o+mSA1IJlWw20unynRQ:fAKVqd0gtxp+IFsg/hVmSAy6Eq

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks