Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 19:03
Behavioral task
behavioral1
Sample
4433d5485fca17b6fcc0c0e3bd5da5cc.exe
Resource
win7-20231129-en
4 signatures
150 seconds
General
-
Target
4433d5485fca17b6fcc0c0e3bd5da5cc.exe
-
Size
886KB
-
MD5
4433d5485fca17b6fcc0c0e3bd5da5cc
-
SHA1
117709a70d73623094d9439e1737a643845f3671
-
SHA256
2ea99244c02351022b99596d4cef769b1ac920b674abd08b268f66a6e171bd8d
-
SHA512
6fdb122f5b5f51da4790a844c7f4d78538ca48a69dfa73ea22dd39de5bffecc42148d48a35015a72eac185f309d1044a53db589e5080d719640ab8f43a3e9e5e
-
SSDEEP
12288:MTEYAsROAsrt/uxduo1jB0Y96qRTJzB4htv8/YgU9D4uUDafWGy8CLrHe3o:MwT7rC6qRTJzyht7ny8fAHgo
Malware Config
Signatures
-
Detects Eternity stealer 1 IoCs
resource yara_rule behavioral2/memory/2544-0-0x0000000000350000-0x0000000000436000-memory.dmp eternity_stealer -
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2544 4433d5485fca17b6fcc0c0e3bd5da5cc.exe