General
-
Target
f9bc76479e0f36005e42a52c7851594ba8529b3f5d08052179030ca98d9afb6f
-
Size
2.2MB
-
Sample
230627-fetsdaea3s
-
MD5
4c5e571050a0cd02c4b291ddf1382dda
-
SHA1
617c9f96fca56a74c1a46a091f47d820d5f66da4
-
SHA256
f9bc76479e0f36005e42a52c7851594ba8529b3f5d08052179030ca98d9afb6f
-
SHA512
6d5426acd5b0fa1c21475bc83ada1afc23eba40cc34ee6b0ab670ea0870a7c90affee6bbd89fd2c254a34888136e6aedcfacc6462fe37e129627ec76ca20e83e
-
SSDEEP
24576:SkT/Hk7qm8vUPKD7rabrpnWzmGnVm0wTZPaWvwsGTtISNFQjFJsu3xQRse9aqD21:jDUqXMSDnxm0VRwPwsnRFSue91j8TP5
Static task
static1
Behavioral task
behavioral1
Sample
f9bc76479e0f36005e42a52c7851594ba8529b3f5d08052179030ca98d9afb6f.exe
Resource
win7-20230621-en
Malware Config
Extracted
eternity
-
payload_urls
http://162.244.93.4/~rubin/swo.exe,http://162.244.93.4/~rubin/art.exe
Targets
-
-
Target
f9bc76479e0f36005e42a52c7851594ba8529b3f5d08052179030ca98d9afb6f
-
Size
2.2MB
-
MD5
4c5e571050a0cd02c4b291ddf1382dda
-
SHA1
617c9f96fca56a74c1a46a091f47d820d5f66da4
-
SHA256
f9bc76479e0f36005e42a52c7851594ba8529b3f5d08052179030ca98d9afb6f
-
SHA512
6d5426acd5b0fa1c21475bc83ada1afc23eba40cc34ee6b0ab670ea0870a7c90affee6bbd89fd2c254a34888136e6aedcfacc6462fe37e129627ec76ca20e83e
-
SSDEEP
24576:SkT/Hk7qm8vUPKD7rabrpnWzmGnVm0wTZPaWvwsGTtISNFQjFJsu3xQRse9aqD21:jDUqXMSDnxm0VRwPwsnRFSue91j8TP5
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-