Extracted

• • Target

    2140-44-0x0000000016D00000-0x0000000016D5A000-memory.dmp

  • Size

    360KB

  • MD5

    de416346446ad09a6a9a60eb98387522

  • SHA1

    c2acb162955d1c1b74b06fad737ba390b66aa246

  • SHA256

    5cd719f68a6ba607c63803855b41085a927987bff2687f7d96e5b156dbd747ea

  • SHA512

    2024e0349cfdcd5dfee1c8813dfc31f0d2c6b16120565bdf476dc79b49ac3ea763a0adbebfbc7b747d14a40dd06ecf521914f6da8861c7ed7455e3afffb25f75

  • SSDEEP

    6144:FnHUgeKAv/oozzzkfuauSOqF2G9M6myoGnPfFYgNVNVIB+wDI9N6bKYA2:FnHUgeKAv/oonM9NmyoG3FYgNVPwc9Ng

  Score

  10^/10

  eternitycollectionspywarestealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2