General

  • Target

    WLAN Optimizer.exe

  • Size

    106KB

  • Sample

    230511-ws75xsha46

  • MD5

    e998f77c0943056319a6a46c330606a4

  • SHA1

    f69f38d17a6b97d75a479d584d07e49fa43bf29d

  • SHA256

    c154ec2d62ecbdab62fd4fdf97157ff93efbc1640871a68bca38e43dad55d2b4

  • SHA512

    484424d5edb1574e0f5aef981995dc852ba277a3dfbeb9542aabe56cf4b8a7df8e4a75742829399d63278d328616f39d8df780f1e57f89930848515b228dfb28

  • SSDEEP

    1536:5/tmdEb3KQHXPUel8WV17Mq4ahXu/nNPzzlK9HXXCUc1Wm/nps8F7Yq8Ih:3mMvqq4fnNQXCrWm/npsMp

Malware Config

Targets

    • Target

      WLAN Optimizer.exe

    • Size

      106KB

    • MD5

      e998f77c0943056319a6a46c330606a4

    • SHA1

      f69f38d17a6b97d75a479d584d07e49fa43bf29d

    • SHA256

      c154ec2d62ecbdab62fd4fdf97157ff93efbc1640871a68bca38e43dad55d2b4

    • SHA512

      484424d5edb1574e0f5aef981995dc852ba277a3dfbeb9542aabe56cf4b8a7df8e4a75742829399d63278d328616f39d8df780f1e57f89930848515b228dfb28

    • SSDEEP

      1536:5/tmdEb3KQHXPUel8WV17Mq4ahXu/nNPzzlK9HXXCUc1Wm/nps8F7Yq8Ih:3mMvqq4fnNQXCrWm/npsMp

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks