General

  • Target

    NEAS.8693548357f9556e04d86a07ce8bc1e0.exe

  • Size

    484KB

  • Sample

    231102-t9nrhabd43

  • MD5

    8693548357f9556e04d86a07ce8bc1e0

  • SHA1

    5d445512f1d85562409f39ba881fdc111e0bd781

  • SHA256

    93ff4def71ab15e25c20be5f917d359c23bfb7bf25728837f4f93c8ee2f825a5

  • SHA512

    37b727180052b17780d2d4a6d393fe1ea5d12bbdfdd67af351484b3e7ca22dde1c04cb2f0c653851796298e697ee9a20d71bd680e6c057485a316a7eb725b96f

  • SSDEEP

    6144:jSiQNghYd0/nf1LxBmestlJWtYOx/YMzdNbFsjPBYL:eiQf6/nRyhtlJWtXzd4jPa

Malware Config

Extracted

Family

eternity

C2

http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion

Targets

    • Target

      NEAS.8693548357f9556e04d86a07ce8bc1e0.exe

    • Size

      484KB

    • MD5

      8693548357f9556e04d86a07ce8bc1e0

    • SHA1

      5d445512f1d85562409f39ba881fdc111e0bd781

    • SHA256

      93ff4def71ab15e25c20be5f917d359c23bfb7bf25728837f4f93c8ee2f825a5

    • SHA512

      37b727180052b17780d2d4a6d393fe1ea5d12bbdfdd67af351484b3e7ca22dde1c04cb2f0c653851796298e697ee9a20d71bd680e6c057485a316a7eb725b96f

    • SSDEEP

      6144:jSiQNghYd0/nf1LxBmestlJWtYOx/YMzdNbFsjPBYL:eiQf6/nRyhtlJWtXzd4jPa

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks