Extracted

• • Target

    ddc68c1c486514e24da7b3dc6217fae0.exe

  • Size

    1.9MB

  • MD5

    ddc68c1c486514e24da7b3dc6217fae0

  • SHA1

    0cdaa3ac9305ca6e99ae88219f7b385c156582e8

  • SHA256

    c1147a4f1f5430a49b73a9c0d7c86f5b47f6040eea6fa7e62f1fabbc54d65ef8

  • SHA512

    ce56ffb7f41282c3adc957aa866f811c19dee605b771bf81d51453cbe38282caf0ba14cb926407d5cf4424b2d933c8b211e857ed9f921f375dd1ae848b37c85b

  • SSDEEP

    49152:sr8VO67v8QPwr/TIK9Zal6yckXt9U+AHH3NW+vT7Bv7W:sr8P7vdPwjcl6yNDUVn3zrF7

  Score

  10^/10

  eternityworm

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2