General
-
Target
a441cc23543964d970035077ac9131fa.exe
-
Size
2.4MB
-
Sample
230409-jd5d9sbf9s
-
MD5
a441cc23543964d970035077ac9131fa
-
SHA1
cec5ef656cd35aacb80f9a6c2000d21957bec31d
-
SHA256
43d252805faac982741d6ad405c322a7a2ade61c4c3fec418d47b09843deda4f
-
SHA512
f0fb634a8ea1179755d9d7be34ab264e5a9569d078cd2e593f04f7f68435a4373b30894b20d5e31d1482160c2282175e83141e1c59a9febda08cd7712e857a7b
-
SSDEEP
49152:+NFaV3ViuD+moCQZhHUWYfo11q33dRGyRt7:mG1QZWo11q3FRF
Static task
static1
Behavioral task
behavioral1
Sample
a441cc23543964d970035077ac9131fa.exe
Resource
win7-20230220-en
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
-
payload_urls
http://167.88.170.23/swo/sw.exe
http://167.88.170.23/swo/swo.exe
Targets
-
-
Target
a441cc23543964d970035077ac9131fa.exe
-
Size
2.4MB
-
MD5
a441cc23543964d970035077ac9131fa
-
SHA1
cec5ef656cd35aacb80f9a6c2000d21957bec31d
-
SHA256
43d252805faac982741d6ad405c322a7a2ade61c4c3fec418d47b09843deda4f
-
SHA512
f0fb634a8ea1179755d9d7be34ab264e5a9569d078cd2e593f04f7f68435a4373b30894b20d5e31d1482160c2282175e83141e1c59a9febda08cd7712e857a7b
-
SSDEEP
49152:+NFaV3ViuD+moCQZhHUWYfo11q33dRGyRt7:mG1QZWo11q3FRF
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-