Resubmissions
12-06-2023 17:44
230612-wbky3adb79 10Analysis
-
max time kernel
533s -
max time network
462s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
12-06-2023 17:44
General
-
Target
Eternity.exe
-
Size
40.7MB
-
MD5
909e2b616e00a2bc02bdffc997579410
-
SHA1
5844639727922d3a680d908f7d413363b998d17c
-
SHA256
cdb04f1b435968dacea47f4a28fff8c0612ffbac9b8df2da01014760d71a297f
-
SHA512
ccdf71d58e0397f8201a7a3e7014520184ebba841143795e41793da8def0d5d077f4fcca2390b3f7689e5f99dacfa0f86904d66d47f6e77f5c0e1cba39bda6a5
-
SSDEEP
786432:jzvsyBy7Mu30RxS9MQo+hc3XivKvWN0w4xng7+2MD4sLh:UyCMrzwag7+2MkW
Malware Config
Signatures
-
Growtopia
Growtopa is an opensource modular stealer written in C#.
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Eternity.exe"C:\Users\Admin\AppData\Local\Temp\Eternity.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD59ee69aa4f1d58226f40fbc3cb509a7ad
SHA1eb5313a624cc6da2d9f6207aaa4977039db336ee
SHA2561f13200b33c50c78d3bed0e05b0369d6379b38660328c5565e5aa40fa408eb48
SHA512b1c2d72523c1ec874c32f0b26dd4d07467803eb7770e1597abe5040501c3da15f775643be6bc5e550ae3bc01ad49cec4324645543133f8154932e750e909da19
-
Filesize
19.5MB
-
Filesize
4KB
-
Filesize
40.4MB
-
Filesize
856KB
-
Filesize
32KB
-
Filesize
256KB
-
Filesize
104KB
-
Filesize
680KB
-
Filesize
256KB
-
Filesize
72KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB