Extracted

• • Target

    eternity.exe

  • Size

    349KB

  • MD5

    5eea7412789d4a9e83d3113ab358718c

  • SHA1

    f974336083787f1a43801b95ad4a2f13217ec363

  • SHA256

    31c77d6590617cb3676c0d976b78db1c41bd7fe25d8b00d366afc27dcc96c832

  • SHA512

    5888bec3476d5bf63bec50b946dab334ddf9918049a9270fbb86c819f839eb50172371aa61b72aaa77c6800fd2fb8b2af1ecc594f7c4e183b49df820b94e9af9

  • SSDEEP

    6144:3izwGnXj4tQvrzi/BymkfuauSOq1kSRKbz3Tqazj1dFYfjrSLKPRbMLxRBV:3izwGXj4tQvrzipGRKbz3TqK1DFKPCf

  Score

  10^/10

  eternitycollectionspywarestealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2