Analysis
- max time kernel
122s - max time network
127s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
31/12/2023, 09:47
General
- Target 317f0d1e5ae64bb05a486add5bd45dc2.exe
- Size 1.3MB
- Sample231231-lsp91aggb2
- SHA256 f6331114110c5e78fd3c77e7c24c4394ca94ec265a162af242d3f145974011fb
Score
10/10
Malware Config
Signatures
- Detects Eternity stealer 2 IoCs
- Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
- Drops startup file 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\317f0d1e5ae64bb05a486add5bd45dc2.exe"C:\Users\Admin\AppData\Local\Temp\317f0d1e5ae64bb05a486add5bd45dc2.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2304 -s 7562⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2304-0-0x0000000000920000-0x0000000000A38000-memory.dmp
memory/2304-1-0x000007FEF61E0000-0x000007FEF6BCC000-memory.dmp
memory/2304-2-0x000007FEF61E0000-0x000007FEF6BCC000-memory.dmp
memory/2304-3-0x0000000000350000-0x0000000000351000-memory.dmp
memory/2304-4-0x000000001B420000-0x000000001B4A0000-memory.dmp
memory/2304-5-0x0000000000360000-0x000000000039E000-memory.dmp
memory/2304-6-0x000000001B420000-0x000000001B4A0000-memory.dmp
memory/2304-9-0x000007FEF61E0000-0x000007FEF6BCC000-memory.dmp
memory/2304-10-0x000000001B420000-0x000000001B4A0000-memory.dmp
memory/2304-11-0x000000001B420000-0x000000001B4A0000-memory.dmp