Overview

overview

10

Static

static

1

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    2.4MB

  • Sample

    230409-pe2yescg4s

  • MD5

    a441cc23543964d970035077ac9131fa

  • SHA1

    cec5ef656cd35aacb80f9a6c2000d21957bec31d

  • SHA256

    43d252805faac982741d6ad405c322a7a2ade61c4c3fec418d47b09843deda4f

  • SHA512

    f0fb634a8ea1179755d9d7be34ab264e5a9569d078cd2e593f04f7f68435a4373b30894b20d5e31d1482160c2282175e83141e1c59a9febda08cd7712e857a7b

  • SSDEEP

    49152:+NFaV3ViuD+moCQZhHUWYfo11q33dRGyRt7:mG1QZWo11q3FRF

Score
10/10
eternityworm

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Attributes
  • payload_urls

    http://167.88.170.23/swo/sw.exe

    http://167.88.170.23/swo/swo.exe

Targets

    • Target

      tmp

    • Size

      2.4MB

    • MD5

      a441cc23543964d970035077ac9131fa

    • SHA1

      cec5ef656cd35aacb80f9a6c2000d21957bec31d

    • SHA256

      43d252805faac982741d6ad405c322a7a2ade61c4c3fec418d47b09843deda4f

    • SHA512

      f0fb634a8ea1179755d9d7be34ab264e5a9569d078cd2e593f04f7f68435a4373b30894b20d5e31d1482160c2282175e83141e1c59a9febda08cd7712e857a7b

    • SSDEEP

      49152:+NFaV3ViuD+moCQZhHUWYfo11q33dRGyRt7:mG1QZWo11q3FRF

    Score
    10/10
    eternityworm

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks