General

  • Target

    5505bbddc971765df496f907b222c2fb.bin

  • Size

    53KB

  • Sample

    230412-csw8waaf5x

  • MD5

    55bb4a70f7194ecd8c41a4c6b0157f7a

  • SHA1

    19fbff3ef4444b93075f006d070292d026a1c953

  • SHA256

    9b99d2bce16ccbaa5a71d3caf4fe1f2f9f71c1dac5d6799ccb1c3c202bad9adc

  • SHA512

    ab56d61ad7a8bb419d5d33cbca9e036392a0af1d99c904214d2480112a988dbc23452efa06522b6085586073a3962ad4a54d92e475b836bea3a258a8c871b2e5

  • SSDEEP

    1536:BnGTmyU03hge2OgZkEHUEgH0AJ2QBhZ2DW65xYk:BGTT9mebBEcDJvTgW6Ak

Score
10/10

Malware Config

Targets

    • Target

      a5498ad33354516c8a2affe2de3e3cf515aafb252d5647d0f8c6efe4b46806a4.exe

    • Size

      112KB

    • MD5

      5505bbddc971765df496f907b222c2fb

    • SHA1

      de3c8668481fa3dacf2052951d45a9c3a388575d

    • SHA256

      a5498ad33354516c8a2affe2de3e3cf515aafb252d5647d0f8c6efe4b46806a4

    • SHA512

      7bec3c8dfa0f63db2ae182805dff0602f55b6e419f30b279992d891542f128c121542a05c214d9436f6baeae895cf09027c5d308731682df41d84e6283fd08eb

    • SSDEEP

      1536:IsCK9eaNw9AFBPGMPYnQZZZZZZZZZonTZ6PhCOybwXuzIBnwbp3r+hX1dZji:xCSbwmFBPGtTZWhybwX7Bo36TZji

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks