Resubmissions
18-10-2023 13:13
231018-qgagmagb56 1018-10-2023 13:10
231018-qectzagb42 1018-10-2023 13:06
231018-qcaa3agb24 10Analysis
-
max time kernel
106s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
18-10-2023 13:06
General
-
Target
Eternity.exe
-
Size
40.7MB
-
MD5
dd25c1eb2ee26fae2e4e1514568f08a2
-
SHA1
4e1c0cc2354510a550f54692449780b8e5613d01
-
SHA256
feed95481351dc1e993cdb061ae0eb28bfe18bc46409d231ee1ddc5e7c538181
-
SHA512
53554600d9f45271658a126a33a08ead6f15ac25736cdc85efaa9e9a831564626f3e42fdbb02f5c2891b743b0127b57e41db5b5857a558710619702d147e8e4f
-
SSDEEP
786432:hzvsyBy7Mu30RZFaG4ZmI1XHMX+XJQripdhr:ayCMr3EG4TVHjZQr+hr
Malware Config
Signatures
-
Growtopia
Growtopa is an opensource modular stealer written in C#.
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Eternity.exe"C:\Users\Admin\AppData\Local\Temp\Eternity.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD5e13ef136485a33c8a5b719d75b0312df
SHA1fb692915b0a73e796c5904e05d37f963baef88dd
SHA2569d2d83667ab5c391fbb60a1249078d0e2b031573a72dc07b67b610178ee94e78
SHA512b3d58a11fc17925316f437e67d4b394bb9b5749e92064fe87eda3e12962f3970416e180cd40c61419651ec611eae0ee9f91a795199689cdd4743678bb6d3dca2
-
Filesize
856KB
-
Filesize
40.4MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
19.5MB
-
Filesize
6.9MB
-
Filesize
32KB
-
Filesize
256KB
-
Filesize
104KB
-
Filesize
680KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
72KB