Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31-12-2023 05:21
General
-
Target
29cf8f8e0cbfb9d2efcc4eb33746d2bc.exe
-
Size
881KB
-
MD5
29cf8f8e0cbfb9d2efcc4eb33746d2bc
-
SHA1
eff4f7b2e9a8e330c56f7c997f06c35fa5534da8
-
SHA256
223214577757ae30b9fd24cb9f8f2e750ecfc309d77e52bfd56b520f77632093
-
SHA512
6c05ddaa9d881068cc9a8f5255c901d2d7b47a48307a01ec2743f3dc8b6b2d618984355da4595f31325361ab33659e3b20b09e116e859a9791b2b6c6552ddf9e
-
SSDEEP
12288:UTEYAsROAsrt/uxduo1jB0Y96qZunGv+fkajssuESw7JqzQCabepSLuIa9:UwT7rC6qZuGv+usuESwVqcmpG6
Score
10/10
Malware Config
Signatures
-
Detects Eternity stealer 1 IoCs
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Drops startup file 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\29cf8f8e0cbfb9d2efcc4eb33746d2bc.exe"C:\Users\Admin\AppData\Local\Temp\29cf8f8e0cbfb9d2efcc4eb33746d2bc.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.8MB
-
Filesize
320KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
10.8MB
-
Filesize
248KB
-
Filesize
10.8MB
-
Filesize
912KB