Analysis
-
max time kernel
158s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 00:52
General
-
Target
0924f5981c48825e5ed86f85e6c0c523.exe
-
Size
880KB
-
MD5
0924f5981c48825e5ed86f85e6c0c523
-
SHA1
fcac9f2f58790421f37dea24f03b1ef7696cbe87
-
SHA256
abcd003b1760e5d14fe6e99491414fa2a0647745c00c4e19a40cf464c947b8fa
-
SHA512
98c2ff2a62a3c0e4182682007468cadc34282ded0b7b0a0ef3a2201b9f91ab02ce2625dbf84e8621b67e3a8676612953ca59f3c872e6c01ba9a7aa79ece4080e
-
SSDEEP
12288:zTEYAsROAsrt/uxduo1jB0Y96quL1ON0H9s1z0fw9tzvrHSKMQx8mhM5WaE4RfL4:zwT7rC6quL1Otzd9xuG8OyEGQ7
Score
10/10
Malware Config
Signatures
-
Detects Eternity stealer 1 IoCs
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Drops startup file 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0924f5981c48825e5ed86f85e6c0c523.exe"C:\Users\Admin\AppData\Local\Temp\0924f5981c48825e5ed86f85e6c0c523.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
912KB
-
Filesize
10.8MB
-
Filesize
320KB
-
Filesize
10.8MB
-
Filesize
4KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
248KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB