eternity

Sharing

Copy URL Twitter E-mail

General

Target
Eternity.zip
Size 35.0MB
Sample240125-dcdbhafagk
SHA256 a22b363a7dce6163c6338ece398265d8d166bc232466619c9a3e45f4530600b8
MD5 087e21b251a1567c10526376837a4bbc
SHA1 802ca49bfb4fa037608cc210344479e26c92a9fe
SHA512 733b9ba11aeb8d089665dc018bba0b6f9723b5a215a8fc77ac748bbf3af3dd77d114f984d821824d16d28a8be014bc781146e43d05e84fb23c9c1a033cb54424
SSDEEP 786432:yhUT6NDYZyaFEPdjHmHkxDrXDxgqiJ4B56ww6aGfk4:kUTqIydpmMDxgqiJ471w6aGfx
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Bunifu.dll
- Size 232KB
- SHA256 d95d7cdb4a549a7f9a06c9059027bd90e926a15b21f118a59536ee9b5febb768
- MD5 a956773892ea3bb538c4656475c35126
- SHA1 e2cc84075cd18b96623fd29d529873f379e398c2
- SHA512 d376b8700d2461e63c4da6fc0dedcc33aa44dca4766fa50fa2cc4475d8bb00fc919568967a2f3b250b8f40a3e45bf48421f3b7f35e081a55805683f3092645e7
- SSDEEP 6144:wHZKhR7DDGGWH7qriB6V5XGLXHb4Hp9JH:wHZKhR7DDGGemriBw5XFHz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1
- Target
  DiscordRPC.dll
- Size 82KB
- SHA256 25c39f91f737d80040c72c9e3f95db0fece1c9653f501828adc16cfb1ec59d26
- MD5 3956130e36754f184a0443c850f708f8
- SHA1 4874cd51b0fa5652ed84e3b0c123bee05dcdffc8
- SHA512 157143dd69378e9914ddbb934229cfbc99ae7d80f4f787b7799fc254054d2c7b1e6f4551cddea30470e28b61309f858fcdb2d009b1c32953dfe5ea7fe78e9e48
- SSDEEP 1536:RICqBkny2//yF9999999999dGxde6HYPM4Q+mRxpSNh:RNy2//yF9999999999dn6b4Q+mWh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  ENet.Managed.dll
- Size 827KB
- SHA256 8b75146db5dc7240ab1c3369aa424568a83bb73ae74eb8e8a79b7f440242daa7
- MD5 816a81ac833687f237182ad574a4d6b2
- SHA1 53f1ab89e3ceccf0293eeb0b86679e1cc0cc85aa
- SHA512 859f84b4fa1291fd094f31843ebb39f41c926d766d770b07df845c6c08686766166a9b15817f24cd160e659904d4d3865b4daf584400e77c72af3e815bd16378
- SSDEEP 12288:uRqwhxzcEtaJzhp/tDLb3Oun7H0HLv3rJmZLcyKu7RTT6akCN7VcX:uxYFVDP5ALTMLp/t7kCVq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  Eternity.exe
- Size 40.8MB
- SHA256 32d38e1eae86466254658d5a91a8bca983706b3aec35148012cb0a50f550a74f
- MD5 40f0212fa97e2fe44ee0fbffae0c96b5
- SHA1 e11664504e7b3ab905de8069e6fb5b1159aec002
- SHA512 2eeebc345f202033762cfa1e5ae4a2b2f477dad7e7019e5aff7b3aff98d0a9ee7c2223a94dfb6cc1a6fd66eb0290adee3baa1fda8d99658253c005ca11f425f5
- SSDEEP 786432:gHvsyBy7Mu30RSVRAaAeQc98NmhJQ8mZoJRWUmx2qmE:gUyCMrUVKa/bhJQ8mZorV+
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

eternity growtopia stealer
- Eternity
  Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
  eternity
- Growtopia
  Growtopa is an opensource modular stealer written in C#.
  stealer growtopia
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral4
- Target
  Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  System.Buffers.dll
- Size 20KB
- SHA256 423200010a7684763451473a4fb206dfa074fc8249676621ef9d9a13417d364d
- MD5 a48936868abf91274def7231aa52dbb5
- SHA1 f02fa5231536c0dd9cef9e84e609646b23d5d33c
- SHA512 c8fe3d1314794ae7071a647e328a46a30e6d96e574daa896fcebebf6bb51ce0af14e6cc63a0e1600a0e4adbc7aa18e97ee58581adccac23981c029ea782b5f9d
- SSDEEP 384:ay/fjFwUI/KQyVvKdDhG6ISDFWvYW8aIcyHRN7WEg2ly0:auhMaVmzDC6b
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6
- Target
  System.Memory.dll
- Size 138KB
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7
- Target
  System.Numerics.Vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral8
- Target
  System.Runtime.CompilerServices.Unsafe.dll
- Size 16KB
- SHA256 a2d38a330df390cc739689369a36520fe491d3660d73974eb46b51608f50675b
- MD5 c4cfe03f75bc01969bc936c9c09baa12
- SHA1 cb96ea48ee8aa9fe764d6f1ec30751001a0a646d
- SHA512 6db15403523b6c966d7aa6906cfc219a956f6c7a68c60774e9ed9f261df1a4d6731b92c59f3caafaeb345b853cd237fa163155b8b8e7825ba69a634878c929e2
- SSDEEP 192:RMyaqO8cxdQWXYWJeaotWsI9A9GaHnhWgN7aJeWwgCWuXqnaju02aU:RTO9dQWXYW8aocyHRN7WEgSly0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Growtopia

Downloads MZ/PE file

Checks computer location settings

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9