Extracted

• • Target

    0x0003000000000737-1039.dat

  • Size

    14KB

  • MD5

    a922561dc3eb681a439a93b07257f606

  • SHA1

    ed45d4bfcdcfcc226bd6e66ce772f3c20b7e8241

  • SHA256

    a9744c5c29b2455061dabc72c660a9737bac2600ea2895d9d24c5099ff7d421b

  • SHA512

    25d74be339bdd2fab4af1e52304a9c131271068baefde87a33d8a3df9160a0ea9f90358e4228faf79d8e97d2a7ffd9503122b18f238b3f470a956509608433d9

  • SSDEEP

    384:frnPpyQr13n3KBIPVIJv9zo5+mbVjyN6Tw/j0asEkx:1qv9M/bM7Yaq

  Score

  10^/10

  eternityxmrigminer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • XMRig Miner payload

    miner

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2