General
-
Target
a1e67d3495c39dd403f65217cb7368a468c66e5ccc790752dacc7e581b5d26b3
-
Size
1.4MB
-
Sample
230630-fp8z2sha9w
-
MD5
51b7efe7f38177392eb8a521959f8cf1
-
SHA1
290eb873259da1e5026b60bd93d9dc69139637df
-
SHA256
a1e67d3495c39dd403f65217cb7368a468c66e5ccc790752dacc7e581b5d26b3
-
SHA512
2a01f1d450ecd30c062e873da49b132e8e1eae9f9891a8711a4073369c6498f7cbd794c45d3c4c9665bc64a16e31074c9c71ca6eb0b4b65318f395498cf91b57
-
SSDEEP
24576:GGkH+O5MMsj/8oJ0HOgwzMIdEyaXC772Q9NXw2/wPOjdGxYNy8:GjHZ5MMpoJOp+MIVai7Tq24GjdGSo8
Behavioral task
behavioral1
Sample
a1e67d3495c39dd403f65217cb7368a468c66e5ccc790752dacc7e581b5d26b3.exe
Resource
win7-20230621-en
Malware Config
Extracted
eternity
-
payload_urls
http://162.244.93.4/~rubin/swo.exe
Targets
-
-
Target
a1e67d3495c39dd403f65217cb7368a468c66e5ccc790752dacc7e581b5d26b3
-
Size
1.4MB
-
MD5
51b7efe7f38177392eb8a521959f8cf1
-
SHA1
290eb873259da1e5026b60bd93d9dc69139637df
-
SHA256
a1e67d3495c39dd403f65217cb7368a468c66e5ccc790752dacc7e581b5d26b3
-
SHA512
2a01f1d450ecd30c062e873da49b132e8e1eae9f9891a8711a4073369c6498f7cbd794c45d3c4c9665bc64a16e31074c9c71ca6eb0b4b65318f395498cf91b57
-
SSDEEP
24576:GGkH+O5MMsj/8oJ0HOgwzMIdEyaXC772Q9NXw2/wPOjdGxYNy8:GjHZ5MMpoJOp+MIVai7Tq24GjdGSo8
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-