General

  • Target

    cryptedStealer.exe.bin

  • Size

    8.5MB

  • Sample

    230505-yggjyacd4v

  • MD5

    2848f45f915d29afcb99468347ddab87

  • SHA1

    1b0a9c4d52b032404be57c2e7c7cf8e161867353

  • SHA256

    850b081a123ef8bf5e154b6200934ecd32bdb4f790fe87f199d8ac95df3a208d

  • SHA512

    69df691a99394a10280b0b95913d7fec2b1ad7ea3b62add76a46108125b87a279d6b95b0c03524de4a12ed21471cf298beaa5eeb153cd84a5d395d441d27ce89

  • SSDEEP

    196608:shTb9B0BPrDz4pxgZZPy5RmStgxb/z6FDiSJXqeUh4mTyZB:aTb9epDz4MZZ4RmxYDiScfhHuZ

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Targets

    • Target

      cryptedStealer.exe.bin

    • Size

      8.5MB

    • MD5

      2848f45f915d29afcb99468347ddab87

    • SHA1

      1b0a9c4d52b032404be57c2e7c7cf8e161867353

    • SHA256

      850b081a123ef8bf5e154b6200934ecd32bdb4f790fe87f199d8ac95df3a208d

    • SHA512

      69df691a99394a10280b0b95913d7fec2b1ad7ea3b62add76a46108125b87a279d6b95b0c03524de4a12ed21471cf298beaa5eeb153cd84a5d395d441d27ce89

    • SSDEEP

      196608:shTb9B0BPrDz4pxgZZPy5RmStgxb/z6FDiSJXqeUh4mTyZB:aTb9epDz4MZZ4RmxYDiScfhHuZ

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks