Extracted

• • Target

    cryptedcollector.exe

  • Size

    550KB

  • MD5

    1a53c6627f5d0b884ddd913f4efc7902

  • SHA1

    2f9345df20cb4bb26eeb891e075a3bbec8d99ed0

  • SHA256

    c6f7f887955a0197629ba4e014e64bce3367a20b3324b9f1c9e6f628fcbcb38d

  • SHA512

    bd0f00086f82ec3a9935fa65423ff310f13c3b96e43adc5a890ef29d9400d7e922080ec597641493bce703b4b723b2b3a09b5ed675890c4721fe1e6c07506ac3

  • SSDEEP

    12288:eqHJxrerpINrUhpujRrLCrsPwKW/JFJGdXJaev:VbQpURrLCrsPwp/JgXQ

  Score

  10^/10

  eternitycollection

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2