General
-
Target
3133a2d3553f6058630f503bf2a7a862.exe
-
Size
2.4MB
-
Sample
230329-xtsmasbc2y
-
MD5
3133a2d3553f6058630f503bf2a7a862
-
SHA1
5eee2643abcc2a3c388e456da96ea28d62ef504d
-
SHA256
46304a058536faf4eb1f49b67b6f4571f12921ae147e110813525639d1c8a878
-
SHA512
ea3bd9a605b4d6e39c954b3e027b2b675530c38634feadbf6d280ccf9bb9487295cb547985b36854146fe188066525baea4886f7477484d14db11fe1a1db919e
-
SSDEEP
49152:QsHEkCiuD+moCQZhHUWYfo11q33dRGyRt7:bG1QZWo11q3FRF
Static task
static1
Behavioral task
behavioral1
Sample
3133a2d3553f6058630f503bf2a7a862.exe
Resource
win7-20230220-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/swo/sw.exe
http://167.88.170.23/swo/swo.exe
Targets
-
-
Target
3133a2d3553f6058630f503bf2a7a862.exe
-
Size
2.4MB
-
MD5
3133a2d3553f6058630f503bf2a7a862
-
SHA1
5eee2643abcc2a3c388e456da96ea28d62ef504d
-
SHA256
46304a058536faf4eb1f49b67b6f4571f12921ae147e110813525639d1c8a878
-
SHA512
ea3bd9a605b4d6e39c954b3e027b2b675530c38634feadbf6d280ccf9bb9487295cb547985b36854146fe188066525baea4886f7477484d14db11fe1a1db919e
-
SSDEEP
49152:QsHEkCiuD+moCQZhHUWYfo11q33dRGyRt7:bG1QZWo11q3FRF
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-