General
-
Target
a68ccf819e65e63c220113ba45c1a13b.exe
-
Size
2.4MB
-
Sample
230405-qgndgsgh2t
-
MD5
a68ccf819e65e63c220113ba45c1a13b
-
SHA1
8a410c54db44221acbb341815d49109594b50300
-
SHA256
23f09d9012c25fbba5f04b0648379e4c8a42ce2a2c30beffe4532b712907e1ef
-
SHA512
1262e12b48f0a471e8da2b470facc387813a1dd92c99e5f2e8fa550c16a1ba3f8c835ff6678bf7f5c4f9986b37e722b78835230d90f63bae6d8ea7f4f3f4f6fe
-
SSDEEP
24576:HfUxAfB9iuK++moKnfNIGQaK83uHU/uYfo11qis3s4b+6GIAANEN2tXL6Y3TEhi2:DLiuD+moCQZhHUWYfo11q33dRGyRt7
Static task
static1
Behavioral task
behavioral1
Sample
a68ccf819e65e63c220113ba45c1a13b.exe
Resource
win7-20230220-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/swo/sw.exe
http://167.88.170.23/swo/swo.exe
Targets
-
-
Target
a68ccf819e65e63c220113ba45c1a13b.exe
-
Size
2.4MB
-
MD5
a68ccf819e65e63c220113ba45c1a13b
-
SHA1
8a410c54db44221acbb341815d49109594b50300
-
SHA256
23f09d9012c25fbba5f04b0648379e4c8a42ce2a2c30beffe4532b712907e1ef
-
SHA512
1262e12b48f0a471e8da2b470facc387813a1dd92c99e5f2e8fa550c16a1ba3f8c835ff6678bf7f5c4f9986b37e722b78835230d90f63bae6d8ea7f4f3f4f6fe
-
SSDEEP
24576:HfUxAfB9iuK++moKnfNIGQaK83uHU/uYfo11qis3s4b+6GIAANEN2tXL6Y3TEhi2:DLiuD+moCQZhHUWYfo11q33dRGyRt7
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-