Extracted

• • Target

    132b551a1e506ae3d496639a001fc0bf657484a7

  • Size

    338KB

  • MD5

    3938dad69b5687b89ff8883b2a51a4db

  • SHA1

    132b551a1e506ae3d496639a001fc0bf657484a7

  • SHA256

    60d3a19ed683bdfbb61985e1cd8ee97f112d8a1f6a14f308aabf8e5432ee9ac2

  • SHA512

    b5b2bef4c55abd334a89b363ae2f283875f91e7f8eff5055c87f0225af3c35d4c707b2689bde4de083e96699301636ed50419b2e0478a394156a729555b700a8

  • SSDEEP

    6144:ovMg+PRW1kLcuskfuauSOqhoQLwcTApPT2fI8y6DUxb3kWQWPY40b3sd:ovMg+PRW1kY8wcTApPkI8KlxQWPYw

  Score

  10^/10

  eternitycollectionspywarestealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2