Extracted

• • Target

    NEAS.7aa42d31e48e600a2f7edcc4ce96fbd0336548b72dcc82227acbe3cc46600d36.exe

  • Size

    443KB

  • MD5

    8a2c454b6571e226223f0f0ffc03f58b

  • SHA1

    c5c83e9769d35c7ac5efa45d228117453b87621e

  • SHA256

    7aa42d31e48e600a2f7edcc4ce96fbd0336548b72dcc82227acbe3cc46600d36

  • SHA512

    c96f423e960ec72e6a22f17250e8fa1b656d436c4d056009344ec50c2494da939558f0930ed6c93851fce7068f77d00b56efd3a25841a9d8c2a55e283a660e09

  • SSDEEP

    6144:7OXIAMbpf/fQFPejb1XnCw1wpkVFoVyS2XLT2ZlUa7hfG2I7Jv2hH:qXIvQgn1Sw1WyJXfkqwh+2I7B2hH

  Score

  10^/10

  eternitycollection

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2