General

  • Target

    405f5eb6453f66e478a5f4c168616bfe.exe

  • Size

    1.3MB

  • Sample

    230519-g8cxdsfe36

  • MD5

    405f5eb6453f66e478a5f4c168616bfe

  • SHA1

    c7f6f50f4d2a7fb6c4e07cad0781607ef45acb78

  • SHA256

    084e0cc2f7f21c82d8591bff89bf0d19e54fa3a6f9d8f4c78e2ff0cdc14ce4eb

  • SHA512

    258bc3d41ddcffe8ccf82ac610b48219deeac5df325435fb68ecaaeceecdd2c2707ac76ec4afc58d52f5d332569b49c04ce47af16093b70abddc6091e2c78702

  • SSDEEP

    24576:zOAkH+O5MMsj/8oJ0HOgwzMIdEyaXC772Q9NXw2/wPOjdGxY:atHZ5MMpoJOp+MIVai7Tq24GjdGS

Score
10/10

Malware Config

Extracted

Family

eternity

Attributes
  • payload_urls

    http://167.88.170.23/swo/sw.exe

    http://167.88.170.23/swo/swo.exe,http://167.88.170.23/1300.exe

Targets

    • Target

      405f5eb6453f66e478a5f4c168616bfe.exe

    • Size

      1.3MB

    • MD5

      405f5eb6453f66e478a5f4c168616bfe

    • SHA1

      c7f6f50f4d2a7fb6c4e07cad0781607ef45acb78

    • SHA256

      084e0cc2f7f21c82d8591bff89bf0d19e54fa3a6f9d8f4c78e2ff0cdc14ce4eb

    • SHA512

      258bc3d41ddcffe8ccf82ac610b48219deeac5df325435fb68ecaaeceecdd2c2707ac76ec4afc58d52f5d332569b49c04ce47af16093b70abddc6091e2c78702

    • SSDEEP

      24576:zOAkH+O5MMsj/8oJ0HOgwzMIdEyaXC772Q9NXw2/wPOjdGxY:atHZ5MMpoJOp+MIVai7Tq24GjdGS

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks