Analysis
-
max time kernel
150s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
15-01-2024 03:55
Behavioral task
behavioral1
Sample
5c1207273d347421e01531690820f8ec.exe
Resource
win7-20231129-en
windows7-x64
4 signatures
150 seconds
General
-
Target
5c1207273d347421e01531690820f8ec.exe
-
Size
1.1MB
-
MD5
5c1207273d347421e01531690820f8ec
-
SHA1
6b42901dbe173ba67e4ea7c6a33c681015131677
-
SHA256
b9dfb3ec5457015f6a52e92a4f23ef0b6cfcf081703c94b4fb8688b9d33cda09
-
SHA512
3c06298e6b7873f20fcbe18fd5cc46db3234957c347d81c5b8b36e0bf3b33f8948e292503c764b5df656ba9293936c92dc51a5e75e7dcdf362006e8c6c115986
-
SSDEEP
24576:uwT7rC6qREcZiTYHYnCoLjvv3CgUtcZi:3rC6qB4zLM
Malware Config
Signatures
-
Detects Eternity stealer 1 IoCs
resource yara_rule behavioral2/memory/1548-0-0x0000000000400000-0x0000000000504000-memory.dmp eternity_stealer -
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1548 5c1207273d347421e01531690820f8ec.exe