General

  • Target

    Eternity.rar

  • Size

    32.4MB

  • Sample

    240216-e8v2vshd7z

  • MD5

    87a1e7084fe1821e53e25d0207ce7525

  • SHA1

    d70309776c9869a8a4623623f5da45f9b0850713

  • SHA256

    9e924f71775bd91da08dd0a356619905a98d5a4bfe6f68fc55424d7772a03768

  • SHA512

    966aced07597c78cc2bbb3863093042118843e6273e16a95db6e1eddab7a0a177634b9b25c6d93f747cac7b860e6e4e460164b8531e8aa920834df62d47463b9

  • SSDEEP

    786432:goZiafg5Oyin+uK+VRK90pbJClOjv4nYZb011YXHY:HUGgTinbVK90pbMlsUCa1YXY

Malware Config

Targets

    • Target

      Eternity/Eternity.exe

    • Size

      52.3MB

    • MD5

      e3e189971b7d8e9b35538b67e8f1c816

    • SHA1

      844f0c22686a81a1658f24a59a35dea10ca79d9f

    • SHA256

      83fa33e0847aceba041845dd30b0b33dd3597417339e191f7c28a6f008fa884b

    • SHA512

      055e33e190161316d204218b9d4f1225c9d4e56866c647afe8779fa2a879d271e58452320344b70d1010f6083fd01bb5a3e1b3738a4da2bb2368943c3ea4892a

    • SSDEEP

      786432:P9Dnx39+h+9q/43018HFVUvakkeFDE1vynNhQlC:FTo+39RkjFoZE

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks