Analysis
- max time kernel
139s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
20/01/2024, 06:40
General
- Target 69bef5d41bf14465072f69169f3b090d.exe
- Size 945KB
- Sample240120-hfnnvsdgh5
- SHA256 76a355959101e990b1b35b6f6ec6f28db30314af212b1c3c8e6e10db8bfc6183
Score
10/10
Malware Config
Signatures
- Detects Eternity stealer 1 IoCs
- Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
- Drops startup file 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\69bef5d41bf14465072f69169f3b090d.exe"C:\Users\Admin\AppData\Local\Temp\69bef5d41bf14465072f69169f3b090d.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4772-0-0x0000000000B70000-0x0000000000C5C000-memory.dmp
memory/4772-1-0x00007FFF93ED0000-0x00007FFF94991000-memory.dmp
memory/4772-2-0x0000000002E70000-0x0000000002EC0000-memory.dmp
memory/4772-4-0x0000000001400000-0x0000000001401000-memory.dmp
memory/4772-3-0x0000000001400000-0x0000000001401000-memory.dmp
memory/4772-5-0x000000001B840000-0x000000001B850000-memory.dmp
memory/4772-7-0x000000001B840000-0x000000001B850000-memory.dmp
memory/4772-6-0x000000001B7A0000-0x000000001B7DE000-memory.dmp
memory/4772-8-0x000000001B840000-0x000000001B850000-memory.dmp
memory/4772-11-0x00007FFF93ED0000-0x00007FFF94991000-memory.dmp