Extracted

• • Target

    setup.exe

  • Size

    335KB

  • MD5

    d1f57b2d5cefe123ce11343539d5b75d

  • SHA1

    a59914693648e798dcfc3093346553ecf8e3aaad

  • SHA256

    f603ae0e085888a68ed94ee5130afc5646e1f291ec3c71d2b4d1cc7f7e6f28ba

  • SHA512

    9c48846a39bb2e429ed2ba47076e30cadfe4f97ecdbf77996155f11990d7224d3181cc967b870d44ba59fb4d001b0be04a93ca5de27697faab292a43eb1a0351

  • SSDEEP

    3072:IJFu4QWqIMC61w1b7aitDLmQrymKDrR6j0j4R4G4crmbpdYHnmsVqZzCRJsBb1D0:yXDmQemfg4L0dsVoaJsBbNpJ2kH4OsD

  Score

  10^/10

  eternitycollectionspywarestealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1