General

  • Target

    Stealer.exe.bin

  • Size

    334KB

  • Sample

    230505-zsfmfsee49

  • MD5

    6c8ada1a13e523ce6a738263937b6e93

  • SHA1

    e4e518d747ca28d4bf706ce958e5210937021382

  • SHA256

    7425b4cb21ead41ef099c7b4e0c049f50114231c8a87db2814ab2b2ff648bbbb

  • SHA512

    e37ce97c4cd8ef0bde5f9fa04adba8073d8f49d99717aa2ee9100ce461e299d00fe95c8eba10a9200e533de5891bb5513fabfe756ca9ec5c25c7754631e9f97a

  • SSDEEP

    6144:wRvNXbJ2Hrv1uq5T/0O6giAnevv/16cZeSb5w5Sgb7:wRvNLJ6jVnuZ49t

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Targets

    • Target

      Stealer.exe.bin

    • Size

      334KB

    • MD5

      6c8ada1a13e523ce6a738263937b6e93

    • SHA1

      e4e518d747ca28d4bf706ce958e5210937021382

    • SHA256

      7425b4cb21ead41ef099c7b4e0c049f50114231c8a87db2814ab2b2ff648bbbb

    • SHA512

      e37ce97c4cd8ef0bde5f9fa04adba8073d8f49d99717aa2ee9100ce461e299d00fe95c8eba10a9200e533de5891bb5513fabfe756ca9ec5c25c7754631e9f97a

    • SSDEEP

      6144:wRvNXbJ2Hrv1uq5T/0O6giAnevv/16cZeSb5w5Sgb7:wRvNLJ6jVnuZ49t

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks