Extracted

• • Target

    f7785189a4d9513dc5fd98ab6aee33c4.exe

  • Size

    1.9MB

  • MD5

    f7785189a4d9513dc5fd98ab6aee33c4

  • SHA1

    1b0a2a75410cd24f9caa8ec541603acb5ae89c4b

  • SHA256

    afc694e2952df47cd0b26fb64fbe82e2fa576f61d45225f190c4604f36a87e5e

  • SHA512

    6c672c621436832fb7026dbc0c8e56a26472f38b4043e7582247edd214e5a419c048a2edf045454f37aa18ffbd2db0c2ec0a4491f0ce2973e9d29867b039cc16

  • SSDEEP

    49152:Ww1ZKADpvYYV29Ve8a0Mt6HAVOHEeKYDreRl:WwDKAD9jz8aNt6HAeXDreRl

  Score

  10^/10

  eternityworm

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2