Extracted

• • Target

    bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

  • Size

    1.6MB

  • MD5

    3ff60bb00b635f8d94673252138c1319

  • SHA1

    a41e71b7583d5b49f82b6afaab70f9d89c77e4d5

  • SHA256

    bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

  • SHA512

    2d1da58a7021c9932a37f9be4569c19483b4a2dc169ccf0f978d21aa7720bb4bb7b822de693deebf2bedd0c12e370fc43ff7f0498cfa85d0ba0bf6da36d64d26

  • SSDEEP

    49152:5ojy+A3cPEDkG+4LNl1R0FuWrDn74Vy6cewVs0B1H0:5ojyUMDVBr0FnrDTVtZ

  Score

  10^/10

  eternitycollection

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2