General
-
Target
e2294e4d5bee6834cba1fe1a8e6822dd.exe
-
Size
2.4MB
-
Sample
230403-pvn2hagc81
-
MD5
e2294e4d5bee6834cba1fe1a8e6822dd
-
SHA1
15bebe3f370b8f18a200dd642d0d47db896381fa
-
SHA256
595556574c59022b9837a133c53c0a229eed297a9c338b70e8acbd99abcfa51b
-
SHA512
44e520bf02422277f7a7a75835e5f975261fedfef60a93eab1abfa19582a5605af619360f73f383fd32c7ead09510182cec0f86e388a615f8d8a75541db20e26
-
SSDEEP
49152:EYAyudWEYZUX5w5rtEZmFeaXRN5c/gJZUm020E6p1kj9FBD:judW45wlGZoLRq+X09Y
Static task
static1
Behavioral task
behavioral1
Sample
e2294e4d5bee6834cba1fe1a8e6822dd.exe
Resource
win7-20230220-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/swo/sw.exe
http://167.88.170.23/swo/swo.exe
Targets
-
-
Target
e2294e4d5bee6834cba1fe1a8e6822dd.exe
-
Size
2.4MB
-
MD5
e2294e4d5bee6834cba1fe1a8e6822dd
-
SHA1
15bebe3f370b8f18a200dd642d0d47db896381fa
-
SHA256
595556574c59022b9837a133c53c0a229eed297a9c338b70e8acbd99abcfa51b
-
SHA512
44e520bf02422277f7a7a75835e5f975261fedfef60a93eab1abfa19582a5605af619360f73f383fd32c7ead09510182cec0f86e388a615f8d8a75541db20e26
-
SSDEEP
49152:EYAyudWEYZUX5w5rtEZmFeaXRN5c/gJZUm020E6p1kj9FBD:judW45wlGZoLRq+X09Y
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-