General

  • Target

    8d611985cb8101c86c2808c5977781287846a2ed0b4f196de61ac632c1f46ed7

  • Size

    932KB

  • Sample

    240203-z8meyacham

  • MD5

    515544fb6f33abfff7b83f4c3589c3d9

  • SHA1

    53aa5502a94a12326b3f2799a28b2782c38e6168

  • SHA256

    8d611985cb8101c86c2808c5977781287846a2ed0b4f196de61ac632c1f46ed7

  • SHA512

    60b760308b41a2deaac615d78865fa893d6721652044f6b05a950fd9535eabef1e6613ce9b2e1265d83d48121d3c97a051c9e9f4d11d60e0c7cf6e35a3168ca8

  • SSDEEP

    24576:WwT7rC6qb3RhaoHAOk+UFenpumfuiEkZJ8:PrC6qb3NAOUSuMu/d

Malware Config

Targets

    • Target

      8d611985cb8101c86c2808c5977781287846a2ed0b4f196de61ac632c1f46ed7

    • Size

      932KB

    • MD5

      515544fb6f33abfff7b83f4c3589c3d9

    • SHA1

      53aa5502a94a12326b3f2799a28b2782c38e6168

    • SHA256

      8d611985cb8101c86c2808c5977781287846a2ed0b4f196de61ac632c1f46ed7

    • SHA512

      60b760308b41a2deaac615d78865fa893d6721652044f6b05a950fd9535eabef1e6613ce9b2e1265d83d48121d3c97a051c9e9f4d11d60e0c7cf6e35a3168ca8

    • SSDEEP

      24576:WwT7rC6qb3RhaoHAOk+UFenpumfuiEkZJ8:PrC6qb3NAOUSuMu/d

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Modifies Windows Defender Real-time Protection settings

    • Disables Task Manager via registry modification

    • Drops startup file

    • Executes dropped EXE

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks