Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9cd351491ae286a5e72b3fbb7a370a1c924bb138970b2ac1e6d52b90ea634fab

  • Size

    1.9MB

  • Sample

    231010-g7hfgsbe7s

  • MD5

    5fabaccd5ac598116338a20c7a73594a

  • SHA1

    8737cce7b8dd1f1c5141aa40cf77556373069842

  • SHA256

    9cd351491ae286a5e72b3fbb7a370a1c924bb138970b2ac1e6d52b90ea634fab

  • SHA512

    4d8f228f2cb8e55b37278950de2a07784709b47c3d7716442a162396499e7f7655d67f0da9b03e55729c5b4b72af7c3781c251b59129b8a436c51dcdd36101d8

  • SSDEEP

    49152:k1QBsSmVbQ0dYeMqVRI8nEzWbONMVfJzcjpzHiUfoi:k1FSmm0d4qw8wWy+awUf/

Score
10/10

Malware Config

Extracted

Family

eternity

C2

http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion

Attributes
  • payload_urls

    http://167.88.170.23/w993.exe

    http://167.88.170.23/s101.exe,http://167.88.170.23/101.exe,http://167.88.170.23/R101.exe

Targets

    • Target

      9cd351491ae286a5e72b3fbb7a370a1c924bb138970b2ac1e6d52b90ea634fab

    • Size

      1.9MB

    • MD5

      5fabaccd5ac598116338a20c7a73594a

    • SHA1

      8737cce7b8dd1f1c5141aa40cf77556373069842

    • SHA256

      9cd351491ae286a5e72b3fbb7a370a1c924bb138970b2ac1e6d52b90ea634fab

    • SHA512

      4d8f228f2cb8e55b37278950de2a07784709b47c3d7716442a162396499e7f7655d67f0da9b03e55729c5b4b72af7c3781c251b59129b8a436c51dcdd36101d8

    • SSDEEP

      49152:k1QBsSmVbQ0dYeMqVRI8nEzWbONMVfJzcjpzHiUfoi:k1FSmm0d4qw8wWy+awUf/

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks