General

  • Target

    e2294e4d5bee6834cba1fe1a8e6822dd.exe

  • Size

    2.4MB

  • Sample

    230403-pvn2hagc81

  • MD5

    e2294e4d5bee6834cba1fe1a8e6822dd

  • SHA1

    15bebe3f370b8f18a200dd642d0d47db896381fa

  • SHA256

    595556574c59022b9837a133c53c0a229eed297a9c338b70e8acbd99abcfa51b

  • SHA512

    44e520bf02422277f7a7a75835e5f975261fedfef60a93eab1abfa19582a5605af619360f73f383fd32c7ead09510182cec0f86e388a615f8d8a75541db20e26

  • SSDEEP

    49152:EYAyudWEYZUX5w5rtEZmFeaXRN5c/gJZUm020E6p1kj9FBD:judW45wlGZoLRq+X09Y

Score
10/10

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Attributes
  • payload_urls

    http://167.88.170.23/swo/sw.exe

    http://167.88.170.23/swo/swo.exe

Targets

    • Target

      e2294e4d5bee6834cba1fe1a8e6822dd.exe

    • Size

      2.4MB

    • MD5

      e2294e4d5bee6834cba1fe1a8e6822dd

    • SHA1

      15bebe3f370b8f18a200dd642d0d47db896381fa

    • SHA256

      595556574c59022b9837a133c53c0a229eed297a9c338b70e8acbd99abcfa51b

    • SHA512

      44e520bf02422277f7a7a75835e5f975261fedfef60a93eab1abfa19582a5605af619360f73f383fd32c7ead09510182cec0f86e388a615f8d8a75541db20e26

    • SSDEEP

      49152:EYAyudWEYZUX5w5rtEZmFeaXRN5c/gJZUm020E6p1kj9FBD:judW45wlGZoLRq+X09Y

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks