General
-
Target
8208c61fb8ae7da93969954ea176ed3730310c2c99d1199094a2cffa491cb23c
-
Size
1.4MB
-
Sample
230808-emw22aad94
-
MD5
88ad6b11165e045a4b03a6eec6546c31
-
SHA1
b16a4d87ad03557d72b162a26f66bfdc43c855c6
-
SHA256
8208c61fb8ae7da93969954ea176ed3730310c2c99d1199094a2cffa491cb23c
-
SHA512
e4e34af5fe2cd0fd1a4d969c4b86ccb9763cc97931da1d73171c293eb888b6d2e45022667a1482e4a1625b117e8b579ac47d6398f362f9e4066f1841a57551aa
-
SSDEEP
24576:iyMtE3yw022MWRrGWOK+0QLTW/NdJrrGWU9G5EvsJ/1nWoBRFmpPvwuM8+re:U23ywWTr+k/NdJeaEvO/HBPmQuMBre
Static task
static1
Behavioral task
behavioral1
Sample
8208c61fb8ae7da93969954ea176ed3730310c2c99d1199094a2cffa491cb23c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8208c61fb8ae7da93969954ea176ed3730310c2c99d1199094a2cffa491cb23c.exe
Resource
win10-20230703-en
Malware Config
Extracted
eternity
-
payload_urls
http://162.244.93.4/~rubin/swo.exe
Targets
-
-
Target
8208c61fb8ae7da93969954ea176ed3730310c2c99d1199094a2cffa491cb23c
-
Size
1.4MB
-
MD5
88ad6b11165e045a4b03a6eec6546c31
-
SHA1
b16a4d87ad03557d72b162a26f66bfdc43c855c6
-
SHA256
8208c61fb8ae7da93969954ea176ed3730310c2c99d1199094a2cffa491cb23c
-
SHA512
e4e34af5fe2cd0fd1a4d969c4b86ccb9763cc97931da1d73171c293eb888b6d2e45022667a1482e4a1625b117e8b579ac47d6398f362f9e4066f1841a57551aa
-
SSDEEP
24576:iyMtE3yw022MWRrGWOK+0QLTW/NdJrrGWU9G5EvsJ/1nWoBRFmpPvwuM8+re:U23ywWTr+k/NdJeaEvO/HBPmQuMBre
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-