General

  • Target

    rust-dotnet-crypter.exe

  • Size

    626KB

  • Sample

    231126-lrg71age6y

  • MD5

    33440e9a461e26fcf61e75fec0d709c1

  • SHA1

    49bde2fdd0e63d9b79cabaee9a00fed7105d252d

  • SHA256

    c7b87ae037b647f8c111d673b6421cdd9a2a0c6014a2d84978a325399c229cc3

  • SHA512

    407104943a652f1fd8c4f4e699178a4b72048b2a6be762e25de1f044eb671accfa464e66164020aac2561b7790e9362ee9831f4f2f4507dd620b69b68eaf8446

  • SSDEEP

    12288:Bfj5Y8jZPz4b56VOEDCIM6opl2ATqzAawF+ypMb0Q:Bfji+dUFgM7pvTqj3ypi

Malware Config

Extracted

Family

eternity

C2

http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion

Targets

    • Target

      rust-dotnet-crypter.exe

    • Size

      626KB

    • MD5

      33440e9a461e26fcf61e75fec0d709c1

    • SHA1

      49bde2fdd0e63d9b79cabaee9a00fed7105d252d

    • SHA256

      c7b87ae037b647f8c111d673b6421cdd9a2a0c6014a2d84978a325399c229cc3

    • SHA512

      407104943a652f1fd8c4f4e699178a4b72048b2a6be762e25de1f044eb671accfa464e66164020aac2561b7790e9362ee9831f4f2f4507dd620b69b68eaf8446

    • SSDEEP

      12288:Bfj5Y8jZPz4b56VOEDCIM6opl2ATqzAawF+ypMb0Q:Bfji+dUFgM7pvTqj3ypi

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks