Extracted

• • Target

    eternity stealer.exe

  • Size

    339KB

  • MD5

    6a6acf8c07a7e689c100d562f24dc58f

  • SHA1

    38ed04cd73dd7aae06e77c53af19fcd5d0e490b8

  • SHA256

    822b60e36b7dd62a0cbb7ed116d23d1c63997067eeac9720547c47344b286e71

  • SHA512

    0fbe16a9ce38461c7772a4d6620efebfffd9092eb1aa4167bf4978f51ea8446622e6c016997c1c0c67f90305cb21ef17935a941b6348aad08ccd0a67cec6271d

  • SSDEEP

    6144:n25U+5VffKkfuauSOqHNY5VVkzVXpz1Am3a7VpwnHO1CrMNL+LqbD8o/:n25U+55ZIVVkzVXpzX3app5L+L6

  Score

  10^/10

  eternitycollectionspywarestealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1